Static task
static1
Behavioral task
behavioral1
Sample
cfcfccfa6a584f0a0c62b3a4368c67d2_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
cfcfccfa6a584f0a0c62b3a4368c67d2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
cfcfccfa6a584f0a0c62b3a4368c67d2_JaffaCakes118
-
Size
84KB
-
MD5
cfcfccfa6a584f0a0c62b3a4368c67d2
-
SHA1
ffa2fdf1674fe4362bb7ecc196dd327b9c9afd6b
-
SHA256
5b78a6f10921862f153e4261d66463d09a3f12da2368855a9c472a343aec6726
-
SHA512
ed79d2db6dc8e3a6e59889cb279a57e595252874f65f4333cd6b28d6f103d8c6521ece2669b03f4e87c346251e464e7d33a951fb695df0ac304ea095eb7e7148
-
SSDEEP
1536:T3Cl6lt9P4ABdnitDmcO/q5bN/rV6exWiMBvtmdD:TSl6ltB4edn+9O/q5bNZ6exWiM3md
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfcfccfa6a584f0a0c62b3a4368c67d2_JaffaCakes118
Files
-
cfcfccfa6a584f0a0c62b3a4368c67d2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
z Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ot Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bk7 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE