Static task
static1
Behavioral task
behavioral1
Sample
8ba1008b89597c3153467cfaa73eb282_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8ba1008b89597c3153467cfaa73eb282_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
8ba1008b89597c3153467cfaa73eb282_JaffaCakes118
-
Size
4KB
-
MD5
8ba1008b89597c3153467cfaa73eb282
-
SHA1
10d4b941790803922ca7c58d4abd2ca16c5221b2
-
SHA256
11fb4d04a9be0cf3d7d51e9ee6f2525bf3ad82baee39c52a8ea7a986f2f10dea
-
SHA512
514f72e60a5300ddef16f5d8468b5d26bf5552cb5611aff43473199f146f4c090279a6e0d7694752e2b5611d9d8d0af1f80993166b310e06d2a428ad0fa9fe6e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ba1008b89597c3153467cfaa73eb282_JaffaCakes118
Files
-
8ba1008b89597c3153467cfaa73eb282_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ