NpvPbsr
Static task
static1
Behavioral task
behavioral1
Sample
c92252487615d5379317febc22dba7d4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c92252487615d5379317febc22dba7d4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c92252487615d5379317febc22dba7d4_JaffaCakes118
-
Size
22KB
-
MD5
c92252487615d5379317febc22dba7d4
-
SHA1
73366c1eb26b92886531586728be4975d56f7ca5
-
SHA256
7f5d3a8dfa13ba8e2142a3b1d644f107cc89c7e90cda2a5543df5787f8bfde1e
-
SHA512
aa4e1497c97dcabb3ec3ee8bbe37b4c70867046596df6e9fb6f8207d77e2e83b1dc6aae5febfe590709cb3feb9b2c01e7b4619c2f21c16b2523bd3d516130cf1
-
SSDEEP
384:7UTVPit7C+YXXXTcJckFw7TFYEeE0bFkuk++6N4ekeLrw1Vm3RoxA96:IToWXXXTcJckOXSK++6NDFPw1r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c92252487615d5379317febc22dba7d4_JaffaCakes118
Files
-
c92252487615d5379317febc22dba7d4_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.edata Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ