Static task
static1
Behavioral task
behavioral1
Sample
a06c41d0edb0a75f687f62771676b46f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a06c41d0edb0a75f687f62771676b46f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a06c41d0edb0a75f687f62771676b46f_JaffaCakes118
-
Size
31KB
-
MD5
a06c41d0edb0a75f687f62771676b46f
-
SHA1
afe433643a32fb37c07d5e1e869708646587ee57
-
SHA256
fc56cb6a4624bd88e23ad2b88209f112f68da7d3266057d19403c5bd0ffe43c4
-
SHA512
422e158c41ea0b20df8ed72278bfc050ba697a0a30f0f3715e92683f4ce312f4609134b6c9948af3e835c70981f9309283d302d41157359e7c060f166e89b164
-
SSDEEP
768:hG4kIaUGM3d2f7oxnp3IPzGx8GRF+lCqDle5MqoFXPzIKn:hFkIJ3d2fMxnp362hq05MqQXP82
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a06c41d0edb0a75f687f62771676b46f_JaffaCakes118
Files
-
a06c41d0edb0a75f687f62771676b46f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
o Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
49lx Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
evs24qg Size: 640B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE