WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
adccbf756d8e28c83d50e138324c2abf_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
adccbf756d8e28c83d50e138324c2abf_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
adccbf756d8e28c83d50e138324c2abf_JaffaCakes118
-
Size
65KB
-
MD5
adccbf756d8e28c83d50e138324c2abf
-
SHA1
6eabcfe4517be2cbf8e922919088809b19267a9a
-
SHA256
daee8c8bc6154a3eeddd9964f304547f280b38ceb6eaaf28a0aa632796e4c304
-
SHA512
f2bdb351dec3876d1c82bd75d79a410b5c149da3a540390eeab9a46f2f0d21acd0b72c6c893bee76528f8c5945c824d120ba0323f2372e047a38984136ccbd7e
-
SSDEEP
768:M6oykCf6gbS9+YZqmMJVf+WDimrTDbfW8EG30PVjpr6drX/ASdOrfuEXu:jtf3S9Zqb/H1njW8H3Gr6Z9dye
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adccbf756d8e28c83d50e138324c2abf_JaffaCakes118
Files
-
adccbf756d8e28c83d50e138324c2abf_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE