Static task
static1
Behavioral task
behavioral1
Sample
ddfa6d8dabd689ba323dbbeb4b32817a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddfa6d8dabd689ba323dbbeb4b32817a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ddfa6d8dabd689ba323dbbeb4b32817a_JaffaCakes118
-
Size
9KB
-
MD5
ddfa6d8dabd689ba323dbbeb4b32817a
-
SHA1
c27b942f60c4eaad17afe3cc23f5a94f72fb2c4a
-
SHA256
2d94aef0355a04942b71c789576cbcf22221cb5b40a418ec2251f394dd4f7903
-
SHA512
b21bed7f1fd96baf7622b73c940800f5968af99cc176f464b94e29c58086289b36c8f0b9de9bc62fbc21ef2178de8d8474ac1fcb06942a35c845aefa3b2b6315
-
SSDEEP
192:cNo5kmXmEEnkITKoUBQIEtNvokhF5hDJtKfnv23qJthDN:y1mWEHI2oT7Nh9Dqv6qJtN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddfa6d8dabd689ba323dbbeb4b32817a_JaffaCakes118
Files
-
ddfa6d8dabd689ba323dbbeb4b32817a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
fdsf Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
csa Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fwa Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE