dll
Static task
static1
Behavioral task
behavioral1
Sample
0f3746bceb36b9a5abe8f0b11da49953_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f3746bceb36b9a5abe8f0b11da49953_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0f3746bceb36b9a5abe8f0b11da49953_JaffaCakes118
-
Size
22KB
-
MD5
0f3746bceb36b9a5abe8f0b11da49953
-
SHA1
3bd4d2ab9af2d85985bfbf94c08802002af47816
-
SHA256
734568945d50e6cf9cb99ff3222536b2d077bd1b60c140cfd6a5c10cec85c056
-
SHA512
0ec464e86520c989418376f3532d3ce119f91edd450513d49e2a62b78cc871b7c41444adcf5eca1afae0469a1db2f367b196e6e051e6b1728df435d01d03455e
-
SSDEEP
384:MsxB2vDN+RXU30ZG6Uy5t2AkQdAsencIJHYAS5gJLEwWnyo/+n:7B2huE3Udt2ArBi3hXJyy9n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f3746bceb36b9a5abe8f0b11da49953_JaffaCakes118
Files
-
0f3746bceb36b9a5abe8f0b11da49953_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE