Static task
static1
Behavioral task
behavioral1
Sample
21a087ee2081a411a639b83f21d46f7a_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
21a087ee2081a411a639b83f21d46f7a_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
21a087ee2081a411a639b83f21d46f7a_JaffaCakes118
-
Size
89KB
-
MD5
21a087ee2081a411a639b83f21d46f7a
-
SHA1
62a5a691718cb392975a3b35983917f452bfaaac
-
SHA256
206045ae3c67d21620138e97e4951d1b31793c314634d34b769ecaf23c451699
-
SHA512
9227c76045ff119ea7e922c1592567102e3f2fe38b8a220d67ddc3bc326f2ab142ab7dbf57c636624f862a5135962822bfa79ecc0e6b84f18b36bce958b9729b
-
SSDEEP
1536:Zz3NJUKJj45fE1p4fZa9CNMAEGjA0lj86Mza6SJ2WX1P5lV9q3dhUbNxouBIDI:ZzPJb390MAEHSJ/nVqPUbNHBI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21a087ee2081a411a639b83f21d46f7a_JaffaCakes118
Files
-
21a087ee2081a411a639b83f21d46f7a_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.WDATA Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������� Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 20KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ