crys
Static task
static1
Behavioral task
behavioral1
Sample
e9216e6a94ca57f3adec8a8eb4557b32_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9216e6a94ca57f3adec8a8eb4557b32_JaffaCakes118.dll
Resource
win10v2004-20240319-en
General
-
Target
e9216e6a94ca57f3adec8a8eb4557b32_JaffaCakes118
-
Size
4KB
-
MD5
e9216e6a94ca57f3adec8a8eb4557b32
-
SHA1
4155fe4dab8586e772ba5c3819339ce6ca129bc1
-
SHA256
e643e827f87cddd2c4c10484872eeece113efd38276f9708e536148cb5e01300
-
SHA512
139cdb19cc502cb07dcc2c459fa80baba626ed30d612c3001c6c9d2421b543bf80c9ffaadc7ec0ac9b0cc88d27305f68e25e89939b4f01d1fbf511f8a8fb15d7
-
SSDEEP
48:a5z4K+cmATmRYoRZCTJzJ7xXXDG9bIyzw4b:MTWnRZ0lJ9XXDC3w4b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9216e6a94ca57f3adec8a8eb4557b32_JaffaCakes118
Files
-
e9216e6a94ca57f3adec8a8eb4557b32_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ