Start
Static task
static1
Behavioral task
behavioral1
Sample
ba4e50129ecc0df041a47f3f84bac4f6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ba4e50129ecc0df041a47f3f84bac4f6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ba4e50129ecc0df041a47f3f84bac4f6_JaffaCakes118
-
Size
11KB
-
MD5
ba4e50129ecc0df041a47f3f84bac4f6
-
SHA1
42f10d7ae8716b5e2baeba9b41d3757fa2b539cc
-
SHA256
07b970e6fbf0409f7c2610d98c32fc4cc3ddb4d1188dd2b5e378967bcfb7c245
-
SHA512
907423953225b083276860f62d7d1f74eb4201cc3f67e45338b86e2c506c0637bd69171721e1146de5e1732373a6bada7fc41419a62b6bfac9283af3a888a610
-
SSDEEP
192:FcMWI9UgYAJ/QYxaagdhPqZJfk0snPWJxbQRhqLGkgUw94kN:FcRI9UE/ladh90seeR6pRkN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba4e50129ecc0df041a47f3f84bac4f6_JaffaCakes118
Files
-
ba4e50129ecc0df041a47f3f84bac4f6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE