Start
Static task
static1
Behavioral task
behavioral1
Sample
d6980290fe90bc93f1fb4af45b11c5c8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6980290fe90bc93f1fb4af45b11c5c8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d6980290fe90bc93f1fb4af45b11c5c8_JaffaCakes118
-
Size
13KB
-
MD5
d6980290fe90bc93f1fb4af45b11c5c8
-
SHA1
adf431a7df7c0994b897d67c1764ad81357ea77f
-
SHA256
1ef56106ffa3f28cad00b1e237ca33304e5533811a74eb983ef96ee3462251e2
-
SHA512
ce8d15cb53d22aed7203b6a806abc66c589ea98fb739c036153a180a571cbcecd7e0afe4f26f9cd41915afe912c6854117a650ae5d60b63fc94eef9d7356eb84
-
SSDEEP
192:BzUySo/04WJlKQGi3vfLLInEIHObOFL5OTfC9BCa13vFuSOZQFnQVcUukgUwu1:+S0BlKFi3vfIE/o0fC9E6QxZQF5UBD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6980290fe90bc93f1fb4af45b11c5c8_JaffaCakes118
Files
-
d6980290fe90bc93f1fb4af45b11c5c8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE