Static task
static1
Behavioral task
behavioral1
Sample
c859bd468e5b517aba9c7e7a4b283f77_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c859bd468e5b517aba9c7e7a4b283f77_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c859bd468e5b517aba9c7e7a4b283f77_JaffaCakes118
-
Size
8KB
-
MD5
c859bd468e5b517aba9c7e7a4b283f77
-
SHA1
42a88642fb1eb59a9b720304576f7119541e0e31
-
SHA256
8d3ec5a8d1cfaee50806108d1308ea6d49f6e24f499600640f7fd85ca9532cf0
-
SHA512
15f575bf6a8ddd8d440a71035e0d874644599d89cb16f1ad5f67ce59f970015f0349f1d8080eeee5dbec6cda5ab29fa676839f3ae8e59146b532f064dd85b339
-
SSDEEP
192:hyUjTKoC7b1e/Qe19lAp2mtxyi6kSAT4bd+PvvmkgUwuy:hyyTK7b1oQp3okhMB4h0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c859bd468e5b517aba9c7e7a4b283f77_JaffaCakes118
Files
-
c859bd468e5b517aba9c7e7a4b283f77_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE