Static task
static1
Behavioral task
behavioral1
Sample
0514b10ac2a92a2092725207ec5aed97_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0514b10ac2a92a2092725207ec5aed97_JaffaCakes118.dll
Resource
win10v2004-20240419-en
General
-
Target
0514b10ac2a92a2092725207ec5aed97_JaffaCakes118
-
Size
4KB
-
MD5
0514b10ac2a92a2092725207ec5aed97
-
SHA1
cb1925dea27b134e22249e84628998f7d18dd5be
-
SHA256
b71228337eb82262a10dc7aa5d0e79837ab62842a034db462874aa0c4bfaab17
-
SHA512
722edd933a8c0b5de670d7673ca45f42923a6b26700710dd2f70b44aea9c4fbccbb0c72acda5db0bb92f95315e7f035f03df3cefbc526f72f61683534b841ea2
-
SSDEEP
96:CUm41X5Ojz5pUxqsG7g1c/JF5zRI0mwPy60g3d7T:rm05Wf7g1CFJRIMPuS7T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0514b10ac2a92a2092725207ec5aed97_JaffaCakes118
Files
-
0514b10ac2a92a2092725207ec5aed97_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ