Static task
static1
Behavioral task
behavioral1
Sample
fcf6014f447aa116435cef1f53e6ee0b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcf6014f447aa116435cef1f53e6ee0b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fcf6014f447aa116435cef1f53e6ee0b_JaffaCakes118
-
Size
23KB
-
MD5
fcf6014f447aa116435cef1f53e6ee0b
-
SHA1
03fe09efb2a5028ba00ae11a355f6c2e187c5921
-
SHA256
44953f48682a1e7ef9c2cd3709e16aeaa32963c57c7ba252dc8345a50cfe66fa
-
SHA512
a3fa4c8c3ab44df3497c9892963e52dc5e0d6986a65d2a960c12970ea99ca797e7f481b719680c60d1d6f49c8b8c1d1883831b347ae406d1d76ffea5c06e566f
-
SSDEEP
384:hTIPWzjEl+yiVtI89XrultRK3t3pfErjYw6PMVWMW3gTxkXNaArtVtHK/Ac3dwij:/DI8R4m3t3pUj76PgWB+xuL5/HidwXQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcf6014f447aa116435cef1f53e6ee0b_JaffaCakes118
Files
-
fcf6014f447aa116435cef1f53e6ee0b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ