Static task
static1
Behavioral task
behavioral1
Sample
018a3509ee7dabea589ebe6a32460954_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
018a3509ee7dabea589ebe6a32460954_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
018a3509ee7dabea589ebe6a32460954_JaffaCakes118
-
Size
86KB
-
MD5
018a3509ee7dabea589ebe6a32460954
-
SHA1
ecfa1902ad131f7db2018e27af8c42be7f3a58ce
-
SHA256
40492c5b0077b768409ad1747bdf69e560219d8e525e6b5c9dc7cfbafa4c64c2
-
SHA512
6da01563ff6f592597f0390eeea8ff44de3165033d4053a3cdf57febd62158fa1592a74fef9576595e5f0ecb081b34813b9a18416c0a6efd1a377263c6489b67
-
SSDEEP
1536:cNr74JmLDRPyZb2C92MEieWxs8WmJf/z2m9b+hCholIngkrWeVgrGnlUw:dqDNyZb2C92MEihx8mJf/zfHhoKgkrWg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 018a3509ee7dabea589ebe6a32460954_JaffaCakes118
Files
-
018a3509ee7dabea589ebe6a32460954_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE