Static task
static1
Behavioral task
behavioral1
Sample
fdf6ac8501ff012e816a19630e06c8e5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdf6ac8501ff012e816a19630e06c8e5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fdf6ac8501ff012e816a19630e06c8e5_JaffaCakes118
-
Size
8KB
-
MD5
fdf6ac8501ff012e816a19630e06c8e5
-
SHA1
3e23455a590167fc6f80b9262113ea68480785e5
-
SHA256
d9210abf6dfb1ad8994d04afb1f729d9eaa9dc0c4ebf068e0fc592b428b76877
-
SHA512
88d6cee087aeb0a768c22b46992148cd54ba71819e5be5d306f41a4a1015c176c77f09739cb99af9a76d0d89aca6c6a9e83bbfdb1d3eea161df55f28e2644f74
-
SSDEEP
192:jj/eWUb6jwKHKrRXwZ8az5JvB/p/1kBeWIIl3yKrkgUwub:jj/eWRjvHSw15JJp+B7iJB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdf6ac8501ff012e816a19630e06c8e5_JaffaCakes118
Files
-
fdf6ac8501ff012e816a19630e06c8e5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE