Static task
static1
Behavioral task
behavioral1
Sample
4e5b1196cf2a9a625122798589aea61f_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
4e5b1196cf2a9a625122798589aea61f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
4e5b1196cf2a9a625122798589aea61f_JaffaCakes118
-
Size
50KB
-
MD5
4e5b1196cf2a9a625122798589aea61f
-
SHA1
016c6feb28532a9458a9c83c41bd73fc34ffc735
-
SHA256
314b217975ea786209f595b63414ac9f68560391069464be4fbe55bcef3acd8b
-
SHA512
af23652e8946b6a9eb4018cf210c1d7fd23d60baf5b2317fa7a9f1a685b46244c5f681bb18915ea6f8cc6532b4efda24b87ce7cfd8d3a52d56768cf907835152
-
SSDEEP
768:xcSlCXviXqJVXJ53Smel5fPxxif6oycvMUUZ0asitmx:xLlCXviuxg5xKP5Y2itmx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e5b1196cf2a9a625122798589aea61f_JaffaCakes118
Files
-
4e5b1196cf2a9a625122798589aea61f_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 5B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 8B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ