Static task
static1
Behavioral task
behavioral1
Sample
a32b766462b35ccf49a923f4952b8710_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a32b766462b35ccf49a923f4952b8710_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a32b766462b35ccf49a923f4952b8710_JaffaCakes118
-
Size
16KB
-
MD5
a32b766462b35ccf49a923f4952b8710
-
SHA1
105fba6bf0a1cfc6efbf96f5b4d18a2330e1cbc4
-
SHA256
3d8a804cadabed921914705a91d7aa762ae3db82b96d1e42c44aac3dd2f1ad11
-
SHA512
4751ed394cecb3bd023a905af6fbb9ff2e0b2b86ba9552e690e29abb7556be2fca36a55504715713a5622034d51540f91e3232f07bedecfd6d4f91556f92ff88
-
SSDEEP
384:0MwtCd9LaETVHcjp2+rAAgQ3Uq42SjknIs0dYJB:0MFZaETRcjp2AAAgRdN4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a32b766462b35ccf49a923f4952b8710_JaffaCakes118
Files
-
a32b766462b35ccf49a923f4952b8710_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE