F3
Static task
static1
Behavioral task
behavioral1
Sample
bebf20f852d5982a9468cc97258f20e4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bebf20f852d5982a9468cc97258f20e4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bebf20f852d5982a9468cc97258f20e4_JaffaCakes118
-
Size
19KB
-
MD5
bebf20f852d5982a9468cc97258f20e4
-
SHA1
04c00d5be757782489af3c7479fa6a78f96c7fec
-
SHA256
8573cd2c08283c6efa90cf69ed5e1a96a03b17eea55ed93898070d4113b8f6d3
-
SHA512
1fba053b52fb23892308dfa1d111ff20188c63b1c02b75ee8313db70f418b2a22ab71551a700726ebbeb89a27e9ee2492bba13c6dc699cf604616c9053c089c5
-
SSDEEP
384:Y0wRAXRM+fNpBOA+i4ucs6N6tKyxBkLybz2xvcOHOoPwQp4lBtB:Y3R8XpBOlducsO6kj0qpZxwQ6j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bebf20f852d5982a9468cc97258f20e4_JaffaCakes118
Files
-
bebf20f852d5982a9468cc97258f20e4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE