Static task
static1
Behavioral task
behavioral1
Sample
f0d0c3dbaa29cb708b67a3bec57fe2b1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f0d0c3dbaa29cb708b67a3bec57fe2b1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
f0d0c3dbaa29cb708b67a3bec57fe2b1_JaffaCakes118
-
Size
44KB
-
MD5
f0d0c3dbaa29cb708b67a3bec57fe2b1
-
SHA1
0dbb06743a894ca3d77397af60a29fb71305f058
-
SHA256
7d253f052074db99506ae7f27c6f24013904de0fc40115bdd5d41c87e191555c
-
SHA512
b317c66acbe10c6b2b38b1bbb6214f9882cbef2e3054cf04c4bee15b18563514b89140051e90cd88d5b38074b8028d6c42dcec2cebd805de7b6917148314ab68
-
SSDEEP
768:sicMMoPCypZ9FUxcX+GAwUw2ZR5LfLQ08zDOmWYgecDLnGfz:siOofZ9miXVdUwORFkTONtGr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0d0c3dbaa29cb708b67a3bec57fe2b1_JaffaCakes118
Files
-
f0d0c3dbaa29cb708b67a3bec57fe2b1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE