Static task
static1
Behavioral task
behavioral1
Sample
0909483f72da959f070c569cc2e9aa54_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0909483f72da959f070c569cc2e9aa54_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0909483f72da959f070c569cc2e9aa54_JaffaCakes118
-
Size
17KB
-
MD5
0909483f72da959f070c569cc2e9aa54
-
SHA1
482a8a50d10af9507eeb59d78fb428b277d3f339
-
SHA256
ddbe5dbad47d33b5b6ef15f092be44dbe8a6ed711f1cab7e2134b215980147a5
-
SHA512
fc700b478d8db5397dc0f9780ee6fc4ab75362d9dbd4c41ff74688813238b52a9dfe40003be3daa6044ebd8a0a94832b278f8c92abb62e27cc8754554737b14e
-
SSDEEP
384:D+l5I6MCI8vNu9cr4RuBKtwFWdlKzethOLlDBPETmAhKX:D+l5IjZ6c9QCNGFfzetKHPEXq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0909483f72da959f070c569cc2e9aa54_JaffaCakes118
Files
-
0909483f72da959f070c569cc2e9aa54_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE