Static task
static1
Behavioral task
behavioral1
Sample
fe316d7d8127a1fe0655dc8d5a8f2111_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe316d7d8127a1fe0655dc8d5a8f2111_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
fe316d7d8127a1fe0655dc8d5a8f2111_JaffaCakes118
-
Size
105KB
-
MD5
fe316d7d8127a1fe0655dc8d5a8f2111
-
SHA1
66c3eb5f7b2a561d57cb60589f6f5af99523cfe9
-
SHA256
b4f45f265fde13ed194c65598d298895bb7a0b28c3b07ddb0e5e97fad2265597
-
SHA512
9d79110cc00435dd17ae6e3079acfa9432c707a3aa85cb66f95e9b5f15262582cdce8408f8dda4fe29be47b5e5ad1c0577afbf1e770d0e5698f3ff8b9dedf6a4
-
SSDEEP
1536:2tN1rW7nsqZieDYAan6TMEEW2NQ+8yIKOSI/FIQQA0rT6DgsZH6U:2xr+pZieAn6T/MNQ+8oOSGFrgT6Dgsk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe316d7d8127a1fe0655dc8d5a8f2111_JaffaCakes118
Files
-
fe316d7d8127a1fe0655dc8d5a8f2111_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE