Start
Static task
static1
Behavioral task
behavioral1
Sample
a1dbe9e3091aa6c9b7f4aefa7b70fef4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a1dbe9e3091aa6c9b7f4aefa7b70fef4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a1dbe9e3091aa6c9b7f4aefa7b70fef4_JaffaCakes118
-
Size
12KB
-
MD5
a1dbe9e3091aa6c9b7f4aefa7b70fef4
-
SHA1
5203c7f99a1f6a6ba35644316ec901fae83865da
-
SHA256
8a1aff6cdbb45613df3d23d1455eb7f5efaa8acea59d06efe4833d80ae344466
-
SHA512
a99aed46c868d34443d7043a2f24786951be788882c06b4c6f1506b8145b5425f5b19f5611c17bb558845ee4d4a0990154b7c4e30242ece26facd176656cc516
-
SSDEEP
384:qHv+VNHswd9b5KOrRoJszfcz1GsgN4QTukCYi1w99jmDQ2p:qINMG9NmsjcBGsgOQTLiGY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1dbe9e3091aa6c9b7f4aefa7b70fef4_JaffaCakes118
Files
-
a1dbe9e3091aa6c9b7f4aefa7b70fef4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE