star
Static task
static1
Behavioral task
behavioral1
Sample
a628380023c6dc84be9f40b62433a1cb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a628380023c6dc84be9f40b62433a1cb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a628380023c6dc84be9f40b62433a1cb_JaffaCakes118
-
Size
300KB
-
MD5
a628380023c6dc84be9f40b62433a1cb
-
SHA1
fdb9292dcf8aee2f7d856c20aaf92d2ab6f17476
-
SHA256
e8b4eda4a6a24c0d0fb2425e73e58f254143952ff107a6b3cb252eb116258cf7
-
SHA512
ff3bc799dfcb95e16611b6df692fa1a7a30975f9e51769d649f3b9ec25d5ce6af84639bcd20e140b352cf216f6d89ce53af42804fa2cde13893b0e03267d925f
-
SSDEEP
6144:IxScRjFqRQA+ejmYF4nDWgRAkP1VGQn8xID0DMFiXb3x9u7x98Py:Ixz9DeiYYR3PXGLxe0DjTxEtcy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a628380023c6dc84be9f40b62433a1cb_JaffaCakes118
Files
-
a628380023c6dc84be9f40b62433a1cb_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 294KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 143B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 56B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ