Static task
static1
Behavioral task
behavioral1
Sample
3218222d9ce369b21f1c35cb4d719d19_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3218222d9ce369b21f1c35cb4d719d19_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
3218222d9ce369b21f1c35cb4d719d19_JaffaCakes118
-
Size
84KB
-
MD5
3218222d9ce369b21f1c35cb4d719d19
-
SHA1
ec0a9dac9afdce4343a8f8d8fbf900b7aa33b9fa
-
SHA256
4f7f2254bae36b446cf7a5e28c606b295fd1daa9380869546dd622d8b5757086
-
SHA512
c9d96e0783248cefef24d13c72448e70a80a05ee8f0e7358366f9bd66674743e37a7f6e344c8bd2c10e86469feba7c2558d8632ff8abd53c73a23eb7821e3d45
-
SSDEEP
1536:nPgifzKTbMMX3rb48LxdGrtAchhAIXtRFNLEay+uWJyoekI+YRMjBC+EwWr:nP/7SbMUnLdGVuwyk/1K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3218222d9ce369b21f1c35cb4d719d19_JaffaCakes118
Files
-
3218222d9ce369b21f1c35cb4d719d19_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ