Static task
static1
Behavioral task
behavioral1
Sample
aa6c838e5c007f5aa2520ad82e5182a4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa6c838e5c007f5aa2520ad82e5182a4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
aa6c838e5c007f5aa2520ad82e5182a4_JaffaCakes118
-
Size
11KB
-
MD5
aa6c838e5c007f5aa2520ad82e5182a4
-
SHA1
0da02737a0ac6e4695867c72378008174689e3fd
-
SHA256
aef5c1f807c108f708e934b955b65ec14070ae71d7acc003f9f50b6aa3277116
-
SHA512
fde868073ab7d2fe48df321d12e16b748919184f85df38d6998b759323b450d307a7203974bd40c895cb261f5b5bcd540ef0aaff14b6a26212d4573f8453ab0a
-
SSDEEP
192:1PDCuLXA5/ROzimZ5hPm4C2fsjH7NXI7kFJHI1WjnBf68I3QBkvxFKJ1x2Nh8ZpX:ZCuzAlROzimbcrmsjH7N47kvHI1+IEks
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa6c838e5c007f5aa2520ad82e5182a4_JaffaCakes118
Files
-
aa6c838e5c007f5aa2520ad82e5182a4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE