Static task
static1
Behavioral task
behavioral1
Sample
d6308dbb5896238754c80d0efc79e58b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6308dbb5896238754c80d0efc79e58b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d6308dbb5896238754c80d0efc79e58b_JaffaCakes118
-
Size
30KB
-
MD5
d6308dbb5896238754c80d0efc79e58b
-
SHA1
030c5008a2b60aba52d3c977ff1e650bfd90dd61
-
SHA256
ebd813b8d1036701869d120dc5643b13d48474461adaa7d11171ce1e02c691fb
-
SHA512
8afafdb7d5f59866d8aeece3e3e41840eccf52ba8ddac7bd759f85a2e35c7c40109b1adfb97a23ad16bd39800be28d15d2571814c453295028c08d77b985c3e7
-
SSDEEP
384:y2k1i7s9pZEDoY2vijACtRx+65XYoPzQNBocpRMok25ZREeBw/:1k1WsVE0Y2KjAcxhYQi53O2w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6308dbb5896238754c80d0efc79e58b_JaffaCakes118
Files
-
d6308dbb5896238754c80d0efc79e58b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
v7refeq Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE