Static task
static1
Behavioral task
behavioral1
Sample
fd5493aaaf2756f98b1be50bb9204ad9_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fd5493aaaf2756f98b1be50bb9204ad9_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fd5493aaaf2756f98b1be50bb9204ad9_JaffaCakes118
-
Size
2KB
-
MD5
fd5493aaaf2756f98b1be50bb9204ad9
-
SHA1
5570580c6e88fa7f485e0c055b69dade9516665a
-
SHA256
e5f4bad125d2be27425c1b76f09b9d744b1eaa7100ed284167e8e6ae1ac43973
-
SHA512
b5612fe1b5fcafd0cbfee09c3bde90f0510d63add1adef523ea4ba59887fae1659b59caaac7decb732b36eca5a34eed8e32b9daa8a8cc6750551225d039217d3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd5493aaaf2756f98b1be50bb9204ad9_JaffaCakes118
Files
-
fd5493aaaf2756f98b1be50bb9204ad9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_BOX_ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE