Static task
static1
Behavioral task
behavioral1
Sample
5d35680ed14caa6df8dead32b3479908_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5d35680ed14caa6df8dead32b3479908_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
5d35680ed14caa6df8dead32b3479908_JaffaCakes118
-
Size
35KB
-
MD5
5d35680ed14caa6df8dead32b3479908
-
SHA1
3caaa96f743d843d0855156ffaedb64bde76422a
-
SHA256
afb2e24e3439ab39f48aca6fa413b30ed3d696831ca3de1989f401c129a2fa5d
-
SHA512
10f16ba59b18c4ee0385f95f18f632be5db9d0a330a25698e1d3799318fa904959a9196c025bc3a3a58b453dbe55334ae8f9ee2d9af2dcf2152141777a4bcea7
-
SSDEEP
768:wyP8iGTICgcrQgsf2htkp5kpK0vyP0LHo4LYELoGnE:wyPhMgUBsf2h0p0KR4L55E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d35680ed14caa6df8dead32b3479908_JaffaCakes118
Files
-
5d35680ed14caa6df8dead32b3479908_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 764B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ