Static task
static1
Behavioral task
behavioral1
Sample
a15a2763ef6c5e6c4791895092e5ce92_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a15a2763ef6c5e6c4791895092e5ce92_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a15a2763ef6c5e6c4791895092e5ce92_JaffaCakes118
-
Size
30KB
-
MD5
a15a2763ef6c5e6c4791895092e5ce92
-
SHA1
5b5f9b7721f96c6cc79a7dde94349c4aa2653298
-
SHA256
903bb369d89711007a8f1e9f889fba34299f1410280d7146c228a2b01d037d9d
-
SHA512
25559194d68d5341404aff296bbca73e4497d4b9fde2148ba43c28da07910b498908d3176a0adb3ddd44dcd3cfcdbce8b353426b4c15fd88aa76aba85049a3b1
-
SSDEEP
768:/qsu3WyUqP2S05oLuUlQYaJv7vr3m3juIKReBuRJ:/qequ75IlQYWrr23juPD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a15a2763ef6c5e6c4791895092e5ce92_JaffaCakes118
Files
-
a15a2763ef6c5e6c4791895092e5ce92_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
8xk9mv Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
prflfdxf Size: 339B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE