Static task
static1
Behavioral task
behavioral1
Sample
fa2a08df6c4470847103e3192ddf22d0_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa2a08df6c4470847103e3192ddf22d0_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fa2a08df6c4470847103e3192ddf22d0_JaffaCakes118
-
Size
57KB
-
MD5
fa2a08df6c4470847103e3192ddf22d0
-
SHA1
f23b04b85e6e8bb2f904ddf999546ed9c96a5629
-
SHA256
e32ec3a738eb0e902bb1f01f1b7365100b65b7ff347c660967b47b4af16e9f09
-
SHA512
10e0efff5211d7da2091c2dc1976be75da0db554f1a97b679b2d535e586d6003bba48a41e7e0a4a52c3aaa500e2cccde01139994cfe1fe7c81620f53188a2112
-
SSDEEP
1536:D3I8ToqUymIPlZRjJWLoh/gjzMaZCsw4jTbm:D33TTPt4MCjBvj3q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa2a08df6c4470847103e3192ddf22d0_JaffaCakes118
Files
-
fa2a08df6c4470847103e3192ddf22d0_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 125KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE