Static task
static1
Behavioral task
behavioral1
Sample
a68cc903321bf165fa51f517cbd665a1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a68cc903321bf165fa51f517cbd665a1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a68cc903321bf165fa51f517cbd665a1_JaffaCakes118
-
Size
12KB
-
MD5
a68cc903321bf165fa51f517cbd665a1
-
SHA1
4ab0049b52a3e5fb766cb2363ef9b7e8547cb521
-
SHA256
002d6a9438febc6105b39027726979a4f256dcd00d514826f83d519638712fee
-
SHA512
9246a11606bbde84e5e14d86c25ab8b2ea85608ac11a65c2341a16f6f238b711ffca42b476bb445eab368cb262dad9f966c40fd017125e21d21b133222209551
-
SSDEEP
192:zBCd3GFZiVgsZ17/ljsysm5GstDLTNcGu3ttD7sbhpIRKlXvK8sg:U5YI7/x4m5Gwc/t8bFA8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a68cc903321bf165fa51f517cbd665a1_JaffaCakes118
Files
-
a68cc903321bf165fa51f517cbd665a1_JaffaCakes118.dll windows:4 windows x86 arch:x86
bd8a597ba6fb788a05c03397e30c57b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualAlloc
VirtualProtect
CreateIoCompletionPort
Sections
.text Size: 1024B - Virtual size: 686B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ