Static task
static1
Behavioral task
behavioral1
Sample
158cb0b529052d65df822aef412fe782_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
158cb0b529052d65df822aef412fe782_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
158cb0b529052d65df822aef412fe782_JaffaCakes118
-
Size
28KB
-
MD5
158cb0b529052d65df822aef412fe782
-
SHA1
ce2c9f8eca0bfe3fe311da866e93bf686d70e91c
-
SHA256
44c81689a763be751928c5eb6e74c7c48cccdd38ceaae3d7ab44d440ac511210
-
SHA512
8ba7136cc7b87c5cbb0fc6e056a04beaa5d826b7413099f0d88c561cc78edd8a35b35e37adeb52153b6b08c4f64e02c3b62e44ae8155de35fdead50cdca61f8a
-
SSDEEP
384:Eo6/CBhFxs1a3rHhKe1t5H+0000004kAWh9:sC/s1UHhP1t5HKAWh9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 158cb0b529052d65df822aef412fe782_JaffaCakes118
Files
-
158cb0b529052d65df822aef412fe782_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ