Static task
static1
Behavioral task
behavioral1
Sample
6f67c39287a08a59f33e8e5ec2bb7bf5_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6f67c39287a08a59f33e8e5ec2bb7bf5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
6f67c39287a08a59f33e8e5ec2bb7bf5_JaffaCakes118
-
Size
201KB
-
MD5
6f67c39287a08a59f33e8e5ec2bb7bf5
-
SHA1
e59583481aaed10212244430d02a99b490d63fa2
-
SHA256
63119640a6d790d1ef40fd1a03e9984c2c98535813876fed8a83da440a7f19a6
-
SHA512
66b4a003966d86da9cff0866d12784d0a98664ddbe5af541b3845f282f28bb472b3fcf549917d29b0d3afef028c28f5b4d4a0c02695775e737c708b7ee7ef3bd
-
SSDEEP
3072:hMlC3iG2cq9NEacC0jnIVldey/51WgeXKKkkW9gRMi59Q6XMBdOQmwKhYL5AApGN:ZwcCNEac3jIVlX/TeXKm0FOThYdh48
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f67c39287a08a59f33e8e5ec2bb7bf5_JaffaCakes118
Files
-
6f67c39287a08a59f33e8e5ec2bb7bf5_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ