Static task
static1
Behavioral task
behavioral1
Sample
09529913b50787e8a84f68b0e4f899f4_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
09529913b50787e8a84f68b0e4f899f4_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
09529913b50787e8a84f68b0e4f899f4_JaffaCakes118
-
Size
880B
-
MD5
09529913b50787e8a84f68b0e4f899f4
-
SHA1
59e4a41ad0e45c0f336c77b24aaec1019e48d6b9
-
SHA256
18959a01238b2f01625cf5ae7ae6f069866c565252febacfc9234414abd0b4aa
-
SHA512
14bafec0d3b0821b59019c265b12d474825bf836dd92c7d38fe80d993bc40b18762ae0df6c92e95e6861aa300019322bf7c95a2bba26cf47c0f3ed01584802e8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09529913b50787e8a84f68b0e4f899f4_JaffaCakes118
Files
-
09529913b50787e8a84f68b0e4f899f4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ