Static task
static1
Behavioral task
behavioral1
Sample
a73814e1a103aca09765fb4c732e5177_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
a73814e1a103aca09765fb4c732e5177_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
a73814e1a103aca09765fb4c732e5177_JaffaCakes118
-
Size
65KB
-
MD5
a73814e1a103aca09765fb4c732e5177
-
SHA1
4412d364748fa2e1f5337f33b1e97729a8e09726
-
SHA256
cfb9ad646b6717cc5a43da309e920dfd4b7f3b8ba59a72e44c55ccc44620d92c
-
SHA512
e0835d56737d0b9ffda298fd3545e9fd7e8b6104a473123940c2bb23a2b7480d5be767de052c229ba33f36e733ff12c72ae7ab4e17b595062eda303fc2b248bd
-
SSDEEP
1536:4wKh/WiXDA/F4/FG9fP9heg4Uwsz91T4avpeAI7:o/WiTA/F4/0Fh54avpeAI7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a73814e1a103aca09765fb4c732e5177_JaffaCakes118
Files
-
a73814e1a103aca09765fb4c732e5177_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ