Static task
static1
Behavioral task
behavioral1
Sample
f318228e63774caeb0cccdb457fa9c16_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f318228e63774caeb0cccdb457fa9c16_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f318228e63774caeb0cccdb457fa9c16_JaffaCakes118
-
Size
57KB
-
MD5
f318228e63774caeb0cccdb457fa9c16
-
SHA1
5735367bfa62fa6508ab562121cae2a119054512
-
SHA256
b1f5b91b20af1353d2089bb0e5e00533ec6410bd1e0dc8f21fe2af55304e49b5
-
SHA512
05716b10e6dad36712d3084e540dd5b1ef1c3f538a0e92b17d63bb407d29eef4d5f9fefbc0eb921c49a541afc76b4817f388df1fdb824d0347dfa1e582a8f211
-
SSDEEP
768:LhR1gKsxcQvgO3Ru67YR5xsxyAS2ISMtQh3GTO6k/K9u4Q0vEHLnthoKHlPbOBBt:1gKDOhuFx8Sg93GO0wDtqKFKriO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f318228e63774caeb0cccdb457fa9c16_JaffaCakes118
Files
-
f318228e63774caeb0cccdb457fa9c16_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ