Static task
static1
Behavioral task
behavioral1
Sample
5e48c9e3ab3e6884704a2e2ba9903c19_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5e48c9e3ab3e6884704a2e2ba9903c19_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
5e48c9e3ab3e6884704a2e2ba9903c19_JaffaCakes118
-
Size
7KB
-
MD5
5e48c9e3ab3e6884704a2e2ba9903c19
-
SHA1
ef120ede99a9dbb4b2f9663e310e42844da8f0a5
-
SHA256
06d7ad9fad1a1e6ee2ed1966f81cc672f9a2cc024c98a720910c07346d086d16
-
SHA512
8668fee5a79f29bc80e2ac15fe272d8e48b96e42908ea7b93755ddb204c82ecdaccad9967cdcb1a4a1c9345d79eb2a3cfe5a659931ddc82211bc62b340dc90f4
-
SSDEEP
96:CITKelcR5KV9oVIcyFdeF+GTSXusUhwPC5qWf7nsq+kEZufPujfVUdtQiNDiVN7j:z85KV3fdUN1akgXZufafCc7YfOZq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e48c9e3ab3e6884704a2e2ba9903c19_JaffaCakes118
Files
-
5e48c9e3ab3e6884704a2e2ba9903c19_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ