start
Static task
static1
Behavioral task
behavioral1
Sample
da57f7b5c6ed8ffe26d2978f94cc4f17_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da57f7b5c6ed8ffe26d2978f94cc4f17_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
da57f7b5c6ed8ffe26d2978f94cc4f17_JaffaCakes118
-
Size
152KB
-
MD5
da57f7b5c6ed8ffe26d2978f94cc4f17
-
SHA1
615e4863fe82b2ed65e690e52aae2449ab238c37
-
SHA256
0ebd317af1f06e316ffc6dc201fd9781d53340093bde4a38c15074b83eefbbba
-
SHA512
947366c2e041ac47ba0f977481b6c329b9e7b4fc686371b4401f7bff7f4cc3e6050f1131314e11f6ca8b38d063267ca75bd8125d27b0280805e12e090c6bc268
-
SSDEEP
3072:TUN+ltQJ5j4R2o+KTyJpCygHvWSV9I7Q1BSTxE6EdTJ4Guga/ByAfgAh:4Nxb4bISy4W77Q12xSTJ4jr/B9fgs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da57f7b5c6ed8ffe26d2978f94cc4f17_JaffaCakes118
Files
-
da57f7b5c6ed8ffe26d2978f94cc4f17_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE