StartDaemon
Static task
static1
Behavioral task
behavioral1
Sample
e1735d5d015b50111d0dd0b4cd0aff17_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e1735d5d015b50111d0dd0b4cd0aff17_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e1735d5d015b50111d0dd0b4cd0aff17_JaffaCakes118
-
Size
7KB
-
MD5
e1735d5d015b50111d0dd0b4cd0aff17
-
SHA1
3580543ef89c8d3417dfc15ad6abb3286618230b
-
SHA256
6188d20ea7e9412f7d88e2f205d3581844bddbfad155638f83b28052a12301dc
-
SHA512
91ef6d2c7eb12c1d16231779c9acaf763c406e40f843568e28e64be6d0ae75a035b5ca255d7e896d33d6f008467c21d609c54de4e28d26a74fe3f5d3dffd6415
-
SSDEEP
192:CwyjBdzAtNOc2Kub+MtDic6x7DxmzfkgUw9z5l:C3Bd8t4JImzzAsl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1735d5d015b50111d0dd0b4cd0aff17_JaffaCakes118
Files
-
e1735d5d015b50111d0dd0b4cd0aff17_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE