Static task
static1
Behavioral task
behavioral1
Sample
cf14b7b17d447a7087dbc160ff6ca2be_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf14b7b17d447a7087dbc160ff6ca2be_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
cf14b7b17d447a7087dbc160ff6ca2be_JaffaCakes118
-
Size
23KB
-
MD5
cf14b7b17d447a7087dbc160ff6ca2be
-
SHA1
07796e511d1a0b59ea0ecde452b92b6b1a0b772f
-
SHA256
d5f42b1c869a813ad33d738903bdeec0bfe2d3ae946d17d549faf24426375ceb
-
SHA512
1dec182f4bdf4b8511df44d406f7ca1310d769dd31fe4199c0df221a136febb9fc691136757c07e776321848771f0716e68753c00079ebaacc89401d03eb4f89
-
SSDEEP
384:3Aixdl+/8R/QWReKHh7dO3+kHMl9u2qlK3OcLw3zJZodRpOMTrhU4:3AIl+8R/jMMh9kHMlfqlK3fw3zJZ6wA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf14b7b17d447a7087dbc160ff6ca2be_JaffaCakes118
Files
-
cf14b7b17d447a7087dbc160ff6ca2be_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 258KB - Virtual size: 708KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE