WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
cf456518b0ffbad0391cc24951580981_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf456518b0ffbad0391cc24951580981_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
cf456518b0ffbad0391cc24951580981_JaffaCakes118
-
Size
29KB
-
MD5
cf456518b0ffbad0391cc24951580981
-
SHA1
86f35794c1f53778101cd83cfc00b46f22bab7df
-
SHA256
7a4a91fa732dc5a33c33b9479aa314d6947442e8b7969f9a4d32c57a050215b1
-
SHA512
7fe4d57c09e035cc931ab2d32ab90d609797cc27158d1c1281803ed4efa4e839dc65cb39c42814e53185e112a5d62273d80c34da02fc38f5ddaf7b66002c68b2
-
SSDEEP
768:yibyO5UAdOj0w7ZfccmpQut0tClTZiWIlDKoGTD2TZKJ:nc7jxhmft04lTZiVlDmWZA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf456518b0ffbad0391cc24951580981_JaffaCakes118
Files
-
cf456518b0ffbad0391cc24951580981_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE