Static task
static1
Behavioral task
behavioral1
Sample
b057a638dadf99a1eaa083491369b4b2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b057a638dadf99a1eaa083491369b4b2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b057a638dadf99a1eaa083491369b4b2_JaffaCakes118
-
Size
19KB
-
MD5
b057a638dadf99a1eaa083491369b4b2
-
SHA1
d5ef5115b0a55ba90d036bacfeff93a316b668e9
-
SHA256
a62486c021443b51555e297206db744c1555b4d2357a3e01f95b929665b8a493
-
SHA512
d683583a16e0e444d7319a3d03c7e97a66530b27c94304b075df661ca9d3f4aaaf343fdf6e3245cabedeb885b9de4ece549987269602f6b1916ba8acd3bb13c9
-
SSDEEP
384:jhf/+ntJGVhCFCxaqwNW0yVa9IgDhWPDZ5OggtiJNsKbqYA/VVRLv8ehL5pYpG:5/++4FPqwNWXVaMPV5MtiJNO1/jJvH5f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b057a638dadf99a1eaa083491369b4b2_JaffaCakes118
Files
-
b057a638dadf99a1eaa083491369b4b2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE