Static task
static1
Behavioral task
behavioral1
Sample
268a9d9f9662d20846bbfba6a738215a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
268a9d9f9662d20846bbfba6a738215a_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
268a9d9f9662d20846bbfba6a738215a_JaffaCakes118
-
Size
609KB
-
MD5
268a9d9f9662d20846bbfba6a738215a
-
SHA1
584db87bb90b72b71f15d6dbf8945fac479fb5f3
-
SHA256
89d7a0c065b858489aae9cc1b3e04bf2ace0ff242cbd66b8c4d81945fddd5c3a
-
SHA512
68f1744103839b9969428ee6d89c321f24fa40a528d332e6121c98f8877315cc2a45101ea2e2af5d93f4019acbc7fb72e8338d0da40d99389d5c75979f61be5e
-
SSDEEP
768:Cu1GPvjhjM0mK5FkgdRnG4QA7ayEi6PAdQqq1w6w6w6w6w6w6w6w6w6w6w6w6w6d:7wjtBhRnG4/PJO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 268a9d9f9662d20846bbfba6a738215a_JaffaCakes118
Files
-
268a9d9f9662d20846bbfba6a738215a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE