Static task
static1
Behavioral task
behavioral1
Sample
c0be2d32734e359c98135d2d5b499a61_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c0be2d32734e359c98135d2d5b499a61_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c0be2d32734e359c98135d2d5b499a61_JaffaCakes118
-
Size
29KB
-
MD5
c0be2d32734e359c98135d2d5b499a61
-
SHA1
a4bf6ca2d387f998d86101ecf60db5cebd3640e3
-
SHA256
2914f40e4348192e3525f5a1d4620135f0308519f029ce6069051a125d49d92c
-
SHA512
01598feeb84c1f3b0d44b6f9552dd6a7a78cdca4f11b27bf37a39c40f625c2c90474bfa08c8afc7634f981ae325d568c8b4e1775d23c11d6db827781e621685b
-
SSDEEP
768:KCncVcN+JId/rFDfCbAt0nytkShs1o20o/EQKIK72vN:NSa7/rFDKblyTs1o2psQKIKi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0be2d32734e359c98135d2d5b499a61_JaffaCakes118
Files
-
c0be2d32734e359c98135d2d5b499a61_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
hmccl Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
e7lgnc5 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8w Size: 96B - Virtual size: 603B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE