IoqPfnq
Static task
static1
Behavioral task
behavioral1
Sample
ffefe16d581340c1e49f585a576a1fd8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffefe16d581340c1e49f585a576a1fd8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ffefe16d581340c1e49f585a576a1fd8_JaffaCakes118
-
Size
22KB
-
MD5
ffefe16d581340c1e49f585a576a1fd8
-
SHA1
31ab6830f4e39c2c520ae55d4c4bffe0b347c947
-
SHA256
764f8c8f8832954c99fb0c2ac5ac5d89506dc5dc50310c9112318b75e9f9e2bf
-
SHA512
e73c93f37f14bb2c7a83cd36e40b0efe13a173e13a470491a50ca61f526a4ccc4ea01a49978243d4267e21227d96ff063be2a4affab977129058d9cba9825e99
-
SSDEEP
384:GxhsqVxw/KQQ2EA+QkpM20/bS/mFa51Jtxy4gB7Pcw/YL9g0F:GIqo5Hzkp+cmo5txydIRF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffefe16d581340c1e49f585a576a1fd8_JaffaCakes118
Files
-
ffefe16d581340c1e49f585a576a1fd8_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.edata Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ