crys
Static task
static1
Behavioral task
behavioral1
Sample
45c2d963e0c1321194c57ef7d1502ec5_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
45c2d963e0c1321194c57ef7d1502ec5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
45c2d963e0c1321194c57ef7d1502ec5_JaffaCakes118
-
Size
3KB
-
MD5
45c2d963e0c1321194c57ef7d1502ec5
-
SHA1
1f4737192fcbda4a6c9dc17e3c127021258c1d8c
-
SHA256
b2eaa18afbbecd716527f82ab9bd2a94c5f490620090db4198cf42a38d28d01d
-
SHA512
77513617207db5e4e76e495bcd8b7343d3545d2c3407f03135230d0134b8296fbc8e84b940711d510d19a697888a30102d0d9157be38cb7013957c688565313a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45c2d963e0c1321194c57ef7d1502ec5_JaffaCakes118
Files
-
45c2d963e0c1321194c57ef7d1502ec5_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ