WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
b957548ec333db4c79b9675f243d816c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b957548ec333db4c79b9675f243d816c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b957548ec333db4c79b9675f243d816c_JaffaCakes118
-
Size
20KB
-
MD5
b957548ec333db4c79b9675f243d816c
-
SHA1
dadfa68ff7f35c5c4d002a7afcc3ed8c49e8fa70
-
SHA256
ad1ce56ab522b571d08434c7592386b41e8cca021f85d947d5baaffc0b83702a
-
SHA512
cb70cef040fce02955a90af7ab34997053dda25cba7fd545a2f0c06dd8431a90bd8ccb3e5e692da86aaaff34482cc410a2925947d3307684a74e35d0bc29cf3d
-
SSDEEP
384:P9qusswQOyQybrEAH22IWTmt72cyTiR5cF1XOgP22eKL:P9qus9yzLW29cyeo12S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b957548ec333db4c79b9675f243d816c_JaffaCakes118
Files
-
b957548ec333db4c79b9675f243d816c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE