Static task
static1
Behavioral task
behavioral1
Sample
cfac30ffd92c72aca9aac84f86625a0c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfac30ffd92c72aca9aac84f86625a0c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
cfac30ffd92c72aca9aac84f86625a0c_JaffaCakes118
-
Size
34KB
-
MD5
cfac30ffd92c72aca9aac84f86625a0c
-
SHA1
19ac52c5c91d776dd18e57b72b25fb9e5db1174a
-
SHA256
b8c957fcd0db2a95f286a894279fa8dc7a9508d7586711672f360bc2f65d3a23
-
SHA512
2227186e32e84f5988b0f41e9e83f4bc9f2b480dac85207818ecfc300493e6c8b61316b9afa04ed531145e5a36392430ef7fca9e323384444372409eb0b8c31f
-
SSDEEP
768:+mwVvYGYp3FAwUWpV/X093EsViXi1IvPATJTNC8kehDjykuOS+Q5Q:ECp1AE/X6UsQXi1I3ATF3ykuT+r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfac30ffd92c72aca9aac84f86625a0c_JaffaCakes118
Files
-
cfac30ffd92c72aca9aac84f86625a0c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE