Static task
static1
Behavioral task
behavioral1
Sample
d24917cdeacb7c613f28d4e08b6524bf_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d24917cdeacb7c613f28d4e08b6524bf_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d24917cdeacb7c613f28d4e08b6524bf_JaffaCakes118
-
Size
26KB
-
MD5
d24917cdeacb7c613f28d4e08b6524bf
-
SHA1
ce1dc1f0e2bcdaf62cb4cefcee5605d4813582e3
-
SHA256
a268d121813a91e7acfc80ed20a160a614568484ff3558e150c5219fb56ea169
-
SHA512
94dd83833f1065413c3bcb917e1b2998d8aede0b0bd0e6594bffa1b286e209911fc67c141b277a9d2ad25b393a148b8880d87708ba8f2132b7b837f58eb75dc0
-
SSDEEP
384:PlhMQaCFT6W9bzpPvXEFRpMky6/QONbpqwzAvQoa1lX8DEG5ktGar8q/adaQiQsX:dhMGTx/1vQRikxXppjJDs6AaA8YaquZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d24917cdeacb7c613f28d4e08b6524bf_JaffaCakes118
Files
-
d24917cdeacb7c613f28d4e08b6524bf_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sf Size: 724B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE