Static task
static1
Behavioral task
behavioral1
Sample
c9688bf186e4ecb7e58ed5a6bfb45b8e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c9688bf186e4ecb7e58ed5a6bfb45b8e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c9688bf186e4ecb7e58ed5a6bfb45b8e_JaffaCakes118
-
Size
25KB
-
MD5
c9688bf186e4ecb7e58ed5a6bfb45b8e
-
SHA1
572f297d5290608764bdfd672aee406263a3e4d7
-
SHA256
581506a06f9e117b38170826e909db3aa0ff936682350cebfd57ba520b398244
-
SHA512
58325e2c1b13e0e03416313f8c8753658a2f5acf467400b1a96c45f12847d1f058fac5a6d3acac5b65ec1b80855c58442c94e69b65968d3f81d396075c8d9df0
-
SSDEEP
384:AS6KRb+Dz7G5HcOA1nnxEBhp3+NqYYTPDED5PPkU5ayJ5jiytOtAOrZuI:tRbgnu8OA1nOCYjDG5PPk0jjiytREu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9688bf186e4ecb7e58ed5a6bfb45b8e_JaffaCakes118
Files
-
c9688bf186e4ecb7e58ed5a6bfb45b8e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
qcxkljyc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
squ4at Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
z7n Size: 635B - Virtual size: 826B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE