Static task
static1
Behavioral task
behavioral1
Sample
14a5a476235516b505a3948c268c6ad5_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
14a5a476235516b505a3948c268c6ad5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
14a5a476235516b505a3948c268c6ad5_JaffaCakes118
-
Size
75KB
-
MD5
14a5a476235516b505a3948c268c6ad5
-
SHA1
574b1e06634e99ae72cc82c9b304fa3ba1af9d21
-
SHA256
f70981aa565018d4bec3f7544eabd5333ef4be06a99f0e6dc43c574049bad975
-
SHA512
24ba68b7b573ac58b57652d4f2f5a28b1d08fbf8af48bf8baed405e57bfc69d9f04beaa7a531123f1b232cdd1bbe974eca9970c85d6b24606f24f8fe3be08131
-
SSDEEP
1536:8C2eXh71wMMoZYBx/LsF6dEBOhSbVlvTAxSyvdE:C23wSElc6d/Sbz8xSyvd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14a5a476235516b505a3948c268c6ad5_JaffaCakes118
Files
-
14a5a476235516b505a3948c268c6ad5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
bo Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mgyvrvui Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7 Size: 4KB - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE