Start
Static task
static1
Behavioral task
behavioral1
Sample
b09c904be0ac6769f8bc1f41733db6e2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b09c904be0ac6769f8bc1f41733db6e2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b09c904be0ac6769f8bc1f41733db6e2_JaffaCakes118
-
Size
11KB
-
MD5
b09c904be0ac6769f8bc1f41733db6e2
-
SHA1
6478b19a6f44f89dc2b73ad07da3bc37dcdafc0a
-
SHA256
814267f53f5405592e22b802b37ff898528b884018a6a96962ff2a121f48e948
-
SHA512
0f4606b876ba41d087e43d9d55638d265a0abb7bc00dbad64f1367edc53f44fd1b481fb0de775815a22ff4b7a5aca0fd56575a5e877bdc169016f5f4e8daeb02
-
SSDEEP
192:2YgcDgzEUnbu2LTTxe4ZPEl67Yw57tmlRnIkIAG+paRIna0v4bAkF9i/BUvcUBk6:2Y1kXy2nTs4ZM0JtmfnIZAGuaRMa0edz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b09c904be0ac6769f8bc1f41733db6e2_JaffaCakes118
Files
-
b09c904be0ac6769f8bc1f41733db6e2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE