Static task
static1
Behavioral task
behavioral1
Sample
a65211c8f2eba237f014b8b2a3dc67c6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a65211c8f2eba237f014b8b2a3dc67c6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a65211c8f2eba237f014b8b2a3dc67c6_JaffaCakes118
-
Size
135KB
-
MD5
a65211c8f2eba237f014b8b2a3dc67c6
-
SHA1
51aa04d2f89762da3f8f0496ba7abf0e3a55856c
-
SHA256
904576dad9bdef4283aa1e6aaf9c3c17f4c3989cb9f8eb01f4962bc528e5de7e
-
SHA512
cbe2bda08997cac479a37356fa4c0614d765174bae017510472f7f390052c47b722bfc4addc94beb5017a07b73d084cfffd084cd9ecfa520fcce0b07f0bcf44f
-
SSDEEP
3072:JfRP5Bhe+sC9xGYE8idaiysM+PLXX0jtysQS1vCPIMh0:JfC+sC9xW80ysM+PD6tysQ9Pzh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a65211c8f2eba237f014b8b2a3dc67c6_JaffaCakes118
Files
-
a65211c8f2eba237f014b8b2a3dc67c6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 134KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE