crys
Static task
static1
Behavioral task
behavioral1
Sample
17dff8155ceb73f6d89ed163de0db3c0_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17dff8155ceb73f6d89ed163de0db3c0_JaffaCakes118.dll
Resource
win10v2004-20240419-en
General
-
Target
17dff8155ceb73f6d89ed163de0db3c0_JaffaCakes118
-
Size
4KB
-
MD5
17dff8155ceb73f6d89ed163de0db3c0
-
SHA1
435db84528d660586a1192b57c947bd57beaa125
-
SHA256
bf02c5c1c622c4a133deee42c9bee77004a18d697a91a31ec67f64809df2cabd
-
SHA512
b89f91f1b2a56e87710dd04d1577c105f8f188c951fb9e18afcb9ddc6b1386abd30a379e3250154542f52d8ba921d1d0748cb6945429d99060e315506123eaa8
-
SSDEEP
48:a5z4K+cmATmRYoRZCTJzJkbd0OyHXkmsra9:MTWnRZ0lJkOPsri
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17dff8155ceb73f6d89ed163de0db3c0_JaffaCakes118
Files
-
17dff8155ceb73f6d89ed163de0db3c0_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ