WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
55bda72588c13d4e27cf9eca6cd8b440_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
55bda72588c13d4e27cf9eca6cd8b440_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
55bda72588c13d4e27cf9eca6cd8b440_JaffaCakes118
-
Size
4KB
-
MD5
55bda72588c13d4e27cf9eca6cd8b440
-
SHA1
d23291280d891f14b15ec4a50a8b5a1be4b4d1bc
-
SHA256
662eecd12102890f2ee3598f870c4506a6ac575b48c74a342ef00c364233ebab
-
SHA512
99e4f2d1a2ce8b8938927f6bc3328d90246e35b0eb6a21f13ec7660d194989480e127fa78f620d6999965f6ae0fc3f9dec080a11268e66947c11ef4dc85e8407
-
SSDEEP
96:oNaSxvftf/rtufkvOJVeabW8I8yn9RdhtkgcwQwTKHZ:oNfJ/RucmVeabDxy97kgUwu5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55bda72588c13d4e27cf9eca6cd8b440_JaffaCakes118
Files
-
55bda72588c13d4e27cf9eca6cd8b440_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE