Static task
static1
Behavioral task
behavioral1
Sample
706ce36e04d1313881e7a2a993a90994_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
706ce36e04d1313881e7a2a993a90994_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
706ce36e04d1313881e7a2a993a90994_JaffaCakes118
-
Size
4KB
-
MD5
706ce36e04d1313881e7a2a993a90994
-
SHA1
fe3827183e76dae5f38c0468f55f95cee667d90b
-
SHA256
5b09a74b17c23ae1e2ba1b07ca9b48046a180eec26102aff0b955245e21a8ce5
-
SHA512
d7a33074cf26039644005b411bc8bb0e94c66b66cc48080ef3af716542c07f0a90f7b56023573fc742d94217b0a8a527e9a49442615b9bc319e2331473d8252d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 706ce36e04d1313881e7a2a993a90994_JaffaCakes118
Files
-
706ce36e04d1313881e7a2a993a90994_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ