Static task
static1
Behavioral task
behavioral1
Sample
d499056ce6e4e98dbee43344f4a32df6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d499056ce6e4e98dbee43344f4a32df6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d499056ce6e4e98dbee43344f4a32df6_JaffaCakes118
-
Size
8KB
-
MD5
d499056ce6e4e98dbee43344f4a32df6
-
SHA1
895e05e3a6c323bbca9e86c856917c1ea1d8c4db
-
SHA256
1bfff79cbdcf37f5724f5bdb05592d3e4f8cebac2f2813e95f7dad6ccd06fa08
-
SHA512
53cb37d24be822a79f012da72edc9e2aedf73400ad8cb866378f9f8ff14c0956e2991936376b78a72fca21c5a257baf51c26ca2edbbb06bc446eb21a9bde4302
-
SSDEEP
192:dXaQg3tQoYJcofxHAU0BkgeG0YrhgZvD+LI8YOu3bkgUwze:dXaQ2tmc/tL0YaQrvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d499056ce6e4e98dbee43344f4a32df6_JaffaCakes118
Files
-
d499056ce6e4e98dbee43344f4a32df6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE