Static task
static1
Behavioral task
behavioral1
Sample
14f527e146273bcbee41217c973a100b_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
14f527e146273bcbee41217c973a100b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
14f527e146273bcbee41217c973a100b_JaffaCakes118
-
Size
42KB
-
MD5
14f527e146273bcbee41217c973a100b
-
SHA1
edd860fe679c39f7c1869c72c91813a32475d488
-
SHA256
c2d8aec9949d8462fc204986464a36f4ee4ff1318f4b85fdebf530221aefac9c
-
SHA512
fd3b4eec9a5d0929075fe998e3a1a2c316b5c7249a6452c85f08b3e80fd6e28b048ec94c3da11f1edde4ac31040d458b5635fd5d0fb5e4e8cf480f6a3676ca0a
-
SSDEEP
48:6P9dWAY8y4oW0kQlF2xMEd1M33GKh0z1LlLtfCKFX:tr4yFF2mEd1c2KyhYKFX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14f527e146273bcbee41217c973a100b_JaffaCakes118
Files
-
14f527e146273bcbee41217c973a100b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ