Static task
static1
Behavioral task
behavioral1
Sample
4f2388fba16922e8b9b331cd05389f26_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4f2388fba16922e8b9b331cd05389f26_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
4f2388fba16922e8b9b331cd05389f26_JaffaCakes118
-
Size
224KB
-
MD5
4f2388fba16922e8b9b331cd05389f26
-
SHA1
ed7bebb63d89347e06c5701ebda76ba0cbf2ede4
-
SHA256
96a9c985e7690a6c5ff0c129301f943603f9c85b0908ad8db0056afa4051b59e
-
SHA512
78c851479fb33dd926ace111634dfd4baf3c2ad255fb0187c1bca6d9c434304e8408a67223c137c0b386d34d52260b842e69c939689b916f3c7551740249a5ef
-
SSDEEP
6144:Sz0N6aMg9dBRqSaDb9/0uHnHe01IWciijKz73lr:Sq6aMOuH+0IjKz7V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f2388fba16922e8b9b331cd05389f26_JaffaCakes118
Files
-
4f2388fba16922e8b9b331cd05389f26_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 222KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ