Static task
static1
Behavioral task
behavioral1
Sample
ce9850f1a36c7817a8ea1ac4179f4466_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce9850f1a36c7817a8ea1ac4179f4466_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ce9850f1a36c7817a8ea1ac4179f4466_JaffaCakes118
-
Size
5KB
-
MD5
ce9850f1a36c7817a8ea1ac4179f4466
-
SHA1
de0f64e27672cd7ca7912f54b10db6684a9f69c7
-
SHA256
2d92eab10007a40b629f1c895febc92c5cc0fffe1028f90ff6069ca496f32df5
-
SHA512
61dd1f181b6b1618b812b9affcb30d30d65c7ffdf970fb1c50e37414b9e62ceebe73184560fe7675b6d5a1f9dac5e1743b02001b4b4030b13b34b32891fac1e2
-
SSDEEP
96:AX0mWlpq51HfopjIP5S3utXVDz4LiP7Jm64lnSEDkgcwQwTKF:AX0mWzq//avgP4Lc7JmcEDkgUwuF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce9850f1a36c7817a8ea1ac4179f4466_JaffaCakes118
Files
-
ce9850f1a36c7817a8ea1ac4179f4466_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE