GetNewInf
Static task
static1
Behavioral task
behavioral1
Sample
aea3c72f83bb60fc8e61e52250683432_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aea3c72f83bb60fc8e61e52250683432_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
aea3c72f83bb60fc8e61e52250683432_JaffaCakes118
-
Size
22KB
-
MD5
aea3c72f83bb60fc8e61e52250683432
-
SHA1
89482b95853d84e276a222751392e5b649bec641
-
SHA256
1bffff121983b248ca7e88fe7192db7992509e65ffb15e71f34f108e6cbd74f5
-
SHA512
5925c226f605a08f6be32b0e587905732aece27dc8238642193e7da966393425f8f63f071b3cd8f145a32cf55a3107056618c47db58396404f7625310256f9fd
-
SSDEEP
384:+4jwd2vDiQcEoamrlc3n7H+boNbI2/3p6nI9k0qBBB3W5Sa5wNS4iYhNm:/jwd2ZcEkB4T+bebJ9k0qXFba5d4iYhQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aea3c72f83bb60fc8e61e52250683432_JaffaCakes118
Files
-
aea3c72f83bb60fc8e61e52250683432_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE