Static task
static1
Behavioral task
behavioral1
Sample
08af4864ed9505e72a2fcdd7ad311473_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
08af4864ed9505e72a2fcdd7ad311473_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
08af4864ed9505e72a2fcdd7ad311473_JaffaCakes118
-
Size
17KB
-
MD5
08af4864ed9505e72a2fcdd7ad311473
-
SHA1
ef8f1ba377cb750a729d601e150adee593bc7591
-
SHA256
ced2994b9a92f8ca7ba9e588d97f99f1d2c0d61164c857b21874731a5971b91d
-
SHA512
c2586c66a379b83f77073fe97a7e1e4984a13c6c43a91340dd22f30bea176c49d064e8e298062e08f7e11cf60cb0b014cc5408490f71fb21bff4fe38986e4f44
-
SSDEEP
384:XPfHzp/O2dz960kXZdExGWfmHuSqI65ic0IK:XH1mSmHuSAx0IK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08af4864ed9505e72a2fcdd7ad311473_JaffaCakes118
Files
-
08af4864ed9505e72a2fcdd7ad311473_JaffaCakes118.dll .js windows:1 windows x86 arch:x86 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 5B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 8B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ