DlHelper
Static task
static1
Behavioral task
behavioral1
Sample
34fbce2710cdde4ad9ff41a9782444d5_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
34fbce2710cdde4ad9ff41a9782444d5_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
34fbce2710cdde4ad9ff41a9782444d5_JaffaCakes118
-
Size
18KB
-
MD5
34fbce2710cdde4ad9ff41a9782444d5
-
SHA1
71dd03bcfcaf1d0b5b572acd2776d961b35440f1
-
SHA256
4ef449384c577a30cda4866979579c6307d09f0f8b0bf9d317fc680991c05a2c
-
SHA512
c476ad2bb843841612f3ca847fc485a809e3617f948831cd1bccdc7320f07e30ae28a078cb5e40f5be08cb5eed3c9752d6fb42a08b7e74265d804b6f5956a444
-
SSDEEP
384:+d8DOz2kQGyyCMy81IcydNkCYHP1ZGJ5rmyDHbjzPw3o:+d8sC3819ydGNu7Pw3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34fbce2710cdde4ad9ff41a9782444d5_JaffaCakes118
Files
-
34fbce2710cdde4ad9ff41a9782444d5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ