Static task
static1
Behavioral task
behavioral1
Sample
a53f93b49f0c89a8bb62e3d66d3f2c6c_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a53f93b49f0c89a8bb62e3d66d3f2c6c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
a53f93b49f0c89a8bb62e3d66d3f2c6c_JaffaCakes118
-
Size
50KB
-
MD5
a53f93b49f0c89a8bb62e3d66d3f2c6c
-
SHA1
0d5a3b17eebdec05cb44db2bcde3b32b54d62515
-
SHA256
90650669debda7c87777700305c958571cb7d13318049a9eb6529531600a1f32
-
SHA512
e18fc2b4d4b602e3328cfa7f77ec8917afb03820d31166f02a0e9ce92d61063fdd5ea5720887dca0effe9b716bcddc889c5552fb2ac02282f53a9ccad606ee25
-
SSDEEP
768:pyWPlCXviXqJVXJ53Smel5fTxxWf6oycvMUUZ0asitmx:pyclCXviuxg51eP5Y2itmx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a53f93b49f0c89a8bb62e3d66d3f2c6c_JaffaCakes118
Files
-
a53f93b49f0c89a8bb62e3d66d3f2c6c_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 5B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 8B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ