Static task
static1
Behavioral task
behavioral1
Sample
cf632066fd73f7bef9e63e8636659e2f_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
cf632066fd73f7bef9e63e8636659e2f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
cf632066fd73f7bef9e63e8636659e2f_JaffaCakes118
-
Size
23KB
-
MD5
cf632066fd73f7bef9e63e8636659e2f
-
SHA1
31da102c791c3dbabb7ac38caaf36540dff8a89e
-
SHA256
187e3a52363f6fd6f14c8d3538534f84f674eb1152a81a55f9aba0470415a4f0
-
SHA512
d1c45538a28137b53a5dd1ac1a779231373d161a4b10ffaff40c11eb5b7a2bf21d28f5bafdcd6a5ff8f94d650d3878fdbbcad80b3f932dbe6739a66242cd36f6
-
SSDEEP
384:SLRxz0Cw0eqd+1NyrQmwZpvVjcdk7gH+t1WB9bJUKRe4A7VWBaaKHG:moCw7qdSIrQBrNcS7get1WB9bJUi+Na
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf632066fd73f7bef9e63e8636659e2f_JaffaCakes118
Files
-
cf632066fd73f7bef9e63e8636659e2f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ