Static task
static1
Behavioral task
behavioral1
Sample
69fa9ff0b72ff52316a073e7c3db3e14_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
69fa9ff0b72ff52316a073e7c3db3e14_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
69fa9ff0b72ff52316a073e7c3db3e14_JaffaCakes118
-
Size
7KB
-
MD5
69fa9ff0b72ff52316a073e7c3db3e14
-
SHA1
e1c85e8f01f86c6406c6d22132201a40e4490cd3
-
SHA256
8804521484da20a82631c35a84f99b63fa3676ee6138f38c4043d7b29ce3dee6
-
SHA512
e0897ff94808f92211d157e88f8dfa288f0236ed48af32d4b2283cffb09d5933fa1821ff693805e62652b8d750fc4419199363ba0220ed44e8811c12ddb87ac1
-
SSDEEP
192:UaCIH8Rt0xVnex96NOOwGRdPEa5T/aopEw1Xqw0vnr4gQ3:UHIH8oxhK96NOOPdxDae6w0vnrBQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69fa9ff0b72ff52316a073e7c3db3e14_JaffaCakes118
Files
-
69fa9ff0b72ff52316a073e7c3db3e14_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ