CreateObject
Static task
static1
Behavioral task
behavioral1
Sample
a208ab17124207e1aa25b9e26f208175_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a208ab17124207e1aa25b9e26f208175_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a208ab17124207e1aa25b9e26f208175_JaffaCakes118
-
Size
32KB
-
MD5
a208ab17124207e1aa25b9e26f208175
-
SHA1
0232acbcd053e58f2ec00399558f1c9c0615fc14
-
SHA256
c543a0a02df523e500803a9e5bb5a98646e437582db58a8a52e441a6d0f2233d
-
SHA512
55515e0fc682f3369752372b32c5369061368a48b87cc2135ba557a83387ebadbae9cfbf57a0c2b50d3fb9b37405006aed394f6c7a88bc017f4484d903e7ed6b
-
SSDEEP
768:OTnlJQqp1ONWnH7MalvgX/O1md/TBKKvNQs0Ey:Cn3QuUibnm/b/IyNdy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a208ab17124207e1aa25b9e26f208175_JaffaCakes118
Files
-
a208ab17124207e1aa25b9e26f208175_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
aaa0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aaa1 Size: 31KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE