Static task
static1
Behavioral task
behavioral1
Sample
0522804255878fc7ed11b16aa4574eb7_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0522804255878fc7ed11b16aa4574eb7_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0522804255878fc7ed11b16aa4574eb7_JaffaCakes118
-
Size
2KB
-
MD5
0522804255878fc7ed11b16aa4574eb7
-
SHA1
319af21c81f960d511e54c896e97e572bf1891fa
-
SHA256
d3846816445d7c177137afeffe0aa3e1fa5f978df702046db6cc592aae097f83
-
SHA512
32beab65e200bd677dd028cabec0e3577a5e02223eada29e9e243424c1baa54d1eae046ebc7e923bdb7b7e1b494ae8cdeae539743fb35418b58615c8c623d78a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0522804255878fc7ed11b16aa4574eb7_JaffaCakes118
Files
-
0522804255878fc7ed11b16aa4574eb7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_BOX_ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE