Static task
static1
Behavioral task
behavioral1
Sample
15dcdd29bf8a8642f262e8df58011d00_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
15dcdd29bf8a8642f262e8df58011d00_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
15dcdd29bf8a8642f262e8df58011d00_JaffaCakes118
-
Size
21KB
-
MD5
15dcdd29bf8a8642f262e8df58011d00
-
SHA1
13e1ea2f8133354241650053cbb7736ce52ca6cc
-
SHA256
6bf791c4b078601cfaa9df6184325bfc78e0f8f675d02f8043e53d979d9a7b68
-
SHA512
286d5aabeacd47530f15f6ce44586e550083fad43597c1f77cef9cbe52850ac42f3e6b7d88c270249be603e641c3458db24fd2d8d1f74121163fce3e8045d572
-
SSDEEP
384:2EEcllSwCGTkkLdqmSyeQkqwBY7X2AKvdLW6/3zT7dz4zu:hDlzCup94HqwmgtWq3Gzu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15dcdd29bf8a8642f262e8df58011d00_JaffaCakes118
Files
-
15dcdd29bf8a8642f262e8df58011d00_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.tls Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ