Static task
static1
Behavioral task
behavioral1
Sample
12f386e0f6f2e6f2853aadf5dd2c1632_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
12f386e0f6f2e6f2853aadf5dd2c1632_JaffaCakes118.dll
Resource
win10v2004-20240419-en
General
-
Target
12f386e0f6f2e6f2853aadf5dd2c1632_JaffaCakes118
-
Size
168KB
-
MD5
12f386e0f6f2e6f2853aadf5dd2c1632
-
SHA1
424260d6c2d45c6e4f7606c780c4720cf819d995
-
SHA256
ff12283d19079ad8a26b2e9258b1f0cd6d302eb468ad40cd62d7dcccbf73ca43
-
SHA512
763a155a0aaa3c37584bcabdf49c7a2a8856cac6e528dd9bdd175a166262a1bf0e82287e242421d6551a3369c7c0cfb483e7a0e473d970318eb933c1adf45b16
-
SSDEEP
3072:rDITELmxyaRCzZMyJwlbGNkEvMLXFcuK5K5jgBvSXGyElpD:rDCxyNZMGuaNQKBc5gaxElpD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12f386e0f6f2e6f2853aadf5dd2c1632_JaffaCakes118
Files
-
12f386e0f6f2e6f2853aadf5dd2c1632_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ