Static task
static1
Behavioral task
behavioral1
Sample
285dca769a33e6c7cdc255be8f1da464_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
285dca769a33e6c7cdc255be8f1da464_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
285dca769a33e6c7cdc255be8f1da464_JaffaCakes118
-
Size
306KB
-
MD5
285dca769a33e6c7cdc255be8f1da464
-
SHA1
1ecee7335b74f5b50131e5d130190371278c73b0
-
SHA256
9cc8fb3192745f51cd837d0865bb9ded53363fbe536182e256a4a92f3fa7d011
-
SHA512
eb4f896bbf6a65bfea07aacd50cfeb4e2243a6245cf83f9399a6d3719ddcca75479d0263bdcb862d2f5c3bbe3c9e453b0ea3628d0306b1eccc115ebe45007fa0
-
SSDEEP
6144:ZNaJUwPN7wo+wy8aZnWPs4LaTEX5KAxhRAlwrhpqaEEcnp1wnO+ySr++siMSx8vl:LONcoukPDLzXfXrPhmp1wnO+yS/siIjx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 285dca769a33e6c7cdc255be8f1da464_JaffaCakes118
Files
-
285dca769a33e6c7cdc255be8f1da464_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 298KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE