Static task
static1
Behavioral task
behavioral1
Sample
dbcb4417c0321cb4958c1978258f64e1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbcb4417c0321cb4958c1978258f64e1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dbcb4417c0321cb4958c1978258f64e1_JaffaCakes118
-
Size
32KB
-
MD5
dbcb4417c0321cb4958c1978258f64e1
-
SHA1
f1d6693df4066f71385368e37120d1c4a3f6ca8b
-
SHA256
48f3860d1bb630b7bab34ff1b9da89703d63571d882a8edfeac8f1c249b27f83
-
SHA512
74e9a2833d2f5457936812fe121b17aabec85edb14d7ea9e84aa0e34455dfa0ac25e1fc23705208f83a7fb4dc2c99ca17b62397704f8489443cfab73b027fed8
-
SSDEEP
768:dyv4OnCaQZ4WxGDdqUeS4nZzRO18kO3H1PczuqXlmxeKYmr+8:dsxnCaQZ4RDM1X3OmFhIuqgyk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbcb4417c0321cb4958c1978258f64e1_JaffaCakes118
Files
-
dbcb4417c0321cb4958c1978258f64e1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
6unc0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6unc1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6unc2 Size: 813B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE