Static task
static1
Behavioral task
behavioral1
Sample
df072b9d03e62334ee604a2560979e43_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df072b9d03e62334ee604a2560979e43_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
df072b9d03e62334ee604a2560979e43_JaffaCakes118
-
Size
26KB
-
MD5
df072b9d03e62334ee604a2560979e43
-
SHA1
c69ef99ef8e78bb9f3277e3d2a911e873d8bd0fb
-
SHA256
e6e81627d42856c17de71783c1e2f8a85404e54b9179715feffca83e6f36ae74
-
SHA512
0b7744b6a05132576e799a994b7501832d2fb7006e1846375dda7f67ee56cc2e90dd34ae9daef3494cbdbcad363d7ebe36a0b051e3819a8033060aafffa90c5b
-
SSDEEP
768:3qncqwiYGkBSqqxZW8h70T48sjsYazfsd:6ncqx6SPWtEj4zfsd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df072b9d03e62334ee604a2560979e43_JaffaCakes118
Files
-
df072b9d03e62334ee604a2560979e43_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4qz Size: 947B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE