Static task
static1
Behavioral task
behavioral1
Sample
fe0e468422ae2abf6dd8a2bc7415e08d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fe0e468422ae2abf6dd8a2bc7415e08d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fe0e468422ae2abf6dd8a2bc7415e08d_JaffaCakes118
-
Size
30KB
-
MD5
fe0e468422ae2abf6dd8a2bc7415e08d
-
SHA1
29d9b7267ff82abff1b553426db2ba76a30fda03
-
SHA256
6843f271c92d5a8cdf462b9b8bf01c5a4b973b409344dcbbe8a016b494484358
-
SHA512
e99c78e106cbb06e30b6f2a4a1e5b80b86b22f5ae6bf3353fe1456badba1b5f3b809397c28d932e1af1dc6515412097a846ce79ba79e058609576625382d10ab
-
SSDEEP
384:oSSGf7CFES4zrkBJZv285KgDmzGDdysd0Go5NCt5lYEKWlCX1iU:oSSGfeFESmrk52gDfnofglYJ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe0e468422ae2abf6dd8a2bc7415e08d_JaffaCakes118
Files
-
fe0e468422ae2abf6dd8a2bc7415e08d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gcyh Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE