Static task
static1
Behavioral task
behavioral1
Sample
af2cc29eee2148e7ff79983971ba2471_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af2cc29eee2148e7ff79983971ba2471_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
af2cc29eee2148e7ff79983971ba2471_JaffaCakes118
-
Size
10KB
-
MD5
af2cc29eee2148e7ff79983971ba2471
-
SHA1
16044abc98454d931fca2cb2f19eaef9e580ff59
-
SHA256
ffb6aa6bbf5436e8fe919c84e84e1549e16ac5c5e147fb1ff5a56a9ec7c948ff
-
SHA512
98e5a38bcfff1cf9fb02a65adf12d004d728a72116a6411c8778c6c29343802ea646e968dd4ef0241d58886d74087d1115b1ee3fb6a6043942f463c6b45add58
-
SSDEEP
96:5pKcml8fzLcMIaGpep3l/ep3EV8xY8l9ZNrjXcXZJjoa+rGx+Q:5pdLo6geb2pEV8OcTNrjXa3EB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af2cc29eee2148e7ff79983971ba2471_JaffaCakes118
Files
-
af2cc29eee2148e7ff79983971ba2471_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.code Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE