Start
Static task
static1
Behavioral task
behavioral1
Sample
a6898785c27ca3fa9cdd0739ec7ed4ae_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a6898785c27ca3fa9cdd0739ec7ed4ae_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a6898785c27ca3fa9cdd0739ec7ed4ae_JaffaCakes118
-
Size
11KB
-
MD5
a6898785c27ca3fa9cdd0739ec7ed4ae
-
SHA1
9cd4fedd77f9af8b6a36c02f169fd48fdcc4649f
-
SHA256
0fdd646752ad59864a4d517f2cdcc731c35accb073ea634fb0be7f2641d057b2
-
SHA512
d51a31a553d6a04e0a318b9c204738feb3f6484337eb94cc2aeb88897cc7a4ca8c644658d784460e60ff004f807900ce0aa9407cd85cfd4757df8dc9446cf026
-
SSDEEP
192:fU9uYgXmyoJZnBOBot+Ip6WmX+u/XP34kyHPuiJn5jNJHx2xzqSe4WqBR5n3kgUU:fAp8QBOGt+IpBmXnP3Wvvt5jbx2xIx4b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6898785c27ca3fa9cdd0739ec7ed4ae_JaffaCakes118
Files
-
a6898785c27ca3fa9cdd0739ec7ed4ae_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE