Start
Static task
static1
Behavioral task
behavioral1
Sample
b4fe16c07eafc554d4a8b98e8d505fc7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b4fe16c07eafc554d4a8b98e8d505fc7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b4fe16c07eafc554d4a8b98e8d505fc7_JaffaCakes118
-
Size
12KB
-
MD5
b4fe16c07eafc554d4a8b98e8d505fc7
-
SHA1
686c71ff92e716439f4d3fcd036428ee31d88284
-
SHA256
45cdf4cb5ddc35456793819b5ad9c1d3842208fe2c95c2a2f8ca1ebfab7f9b0d
-
SHA512
09c2070f0efdd1a92d4fc4ecf695aa8d7f5ba2c5acd34c22746e91432cf82850d524ad8c5c97afb02a3cada691ba98d84460e4ff3a74f25eb3ab1e0da46ec84e
-
SSDEEP
192:jl706uPinf5qmXkN5Cib5ruhSUgDf+DQsZSKZGDoRGb1XaWVjhV7DmQFp7FUkgUH:jlA6myplBhSU+d0S5cGb13HD1H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4fe16c07eafc554d4a8b98e8d505fc7_JaffaCakes118
Files
-
b4fe16c07eafc554d4a8b98e8d505fc7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE