Static task
static1
Behavioral task
behavioral1
Sample
cf5b685f3ccbb504bbd1f5701fc26bf6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf5b685f3ccbb504bbd1f5701fc26bf6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
cf5b685f3ccbb504bbd1f5701fc26bf6_JaffaCakes118
-
Size
15KB
-
MD5
cf5b685f3ccbb504bbd1f5701fc26bf6
-
SHA1
1c958ffe178b334bf74b2d39f5c26da4f08b192f
-
SHA256
5f4224372fb4faba2a7933d959bc456a2a7dab2b0809589482eaf1af78d755ec
-
SHA512
12fab8973ceac85f33f5a1d27235e95b2c23326ced9a9851422cd05bff69579bcd15233115bd8613369c6072f14d018af2c502648c169e2446bf0683ffe1df3d
-
SSDEEP
384:dzJ6YN25DXDaL/SvzvQrZ1Gi7Vnqxdx2Gd8n8:xJhebmGrW7VMP2z8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf5b685f3ccbb504bbd1f5701fc26bf6_JaffaCakes118
Files
-
cf5b685f3ccbb504bbd1f5701fc26bf6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 353B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ