Static task
static1
Behavioral task
behavioral1
Sample
51ee6f2a8d2dad1fece7eb6f492ef23a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
51ee6f2a8d2dad1fece7eb6f492ef23a_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
51ee6f2a8d2dad1fece7eb6f492ef23a_JaffaCakes118
-
Size
36KB
-
MD5
51ee6f2a8d2dad1fece7eb6f492ef23a
-
SHA1
795e0e1e8e8ea6e1d3dbeb95a35780234434856e
-
SHA256
ba155526cb9f0486f8f9118d94bc0c0ebc1f46953c75c04c7f62c5db95941b11
-
SHA512
d8485dd84ef7bd85f5f152bc82a43ff0bb69dc71ce92cedca37b4d8a8c1b9905c254182e62652f346d9dada926097154b40fa24fcc5e91f0e61cef0e31f9af6f
-
SSDEEP
768:vEWxQAkJg+wUQ74zmS8pk/sAq7IImTW6uJfljwu1Iq6:MWeEGQ7ymSOapqnhJNjwvR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51ee6f2a8d2dad1fece7eb6f492ef23a_JaffaCakes118
Files
-
51ee6f2a8d2dad1fece7eb6f492ef23a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 449KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE