Static task
static1
Behavioral task
behavioral1
Sample
d5061597b9d90c07a426a7461013082b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d5061597b9d90c07a426a7461013082b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d5061597b9d90c07a426a7461013082b_JaffaCakes118
-
Size
7KB
-
MD5
d5061597b9d90c07a426a7461013082b
-
SHA1
2fb79f451f69de976217c6a9e9c6e5c7eb9e41b9
-
SHA256
2e9ccec32bbe4bf58ca7ab7fc607b51161b6029e098e62e4adcd2149b17dd7cd
-
SHA512
ab5d58e504bb994c6d9860dd9d68a9a38648912035e634344d11f00ab804aba14f4960dff43d87fb1d92a984ebe6e642b6870e83f4b5941c96219206009664ac
-
SSDEEP
192:vbkT3sPKV3KGdJbKhpO9ccrlIDOBBXI63iNkgUwu1:IT3xV3KGLbOhcrlIDABXI63iiP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5061597b9d90c07a426a7461013082b_JaffaCakes118
Files
-
d5061597b9d90c07a426a7461013082b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE