Static task
static1
Behavioral task
behavioral1
Sample
a614f8101365631a0fa1547c1d3b7208_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a614f8101365631a0fa1547c1d3b7208_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a614f8101365631a0fa1547c1d3b7208_JaffaCakes118
-
Size
29KB
-
MD5
a614f8101365631a0fa1547c1d3b7208
-
SHA1
497b769da8940bdcf47a1ca0d5f71f2a9db741cc
-
SHA256
0973e2d87511dfd7c8f7682e30dd4abe6ee220a2e789f0b7ac9cce4bcdc38c32
-
SHA512
1b78e0b303da8a43ad97814e0298caddadc1594fd02a73073b625fb58e76e38b2ed36d16c497e59f2066a4dcdcba099c180d5c6a24d9dff2bb4ca6ead000ce15
-
SSDEEP
768:TKQcXiQwZvPLLBFfuv0fQQxgwWBvQSimikIfQi1vZbdf:TKQcSQwZvH2vjIMvTiz3QEZR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a614f8101365631a0fa1547c1d3b7208_JaffaCakes118
Files
-
a614f8101365631a0fa1547c1d3b7208_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
w7wyq9 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
k97c Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wkiq Size: 681B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE