run
Static task
static1
Behavioral task
behavioral1
Sample
311966a8e0638884466e8d4a08544ca8_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
311966a8e0638884466e8d4a08544ca8_JaffaCakes118
-
Size
14KB
-
MD5
311966a8e0638884466e8d4a08544ca8
-
SHA1
00f0535bcfe7695703380dd9eea2819a289ab39e
-
SHA256
79e095de265e427cb22d980efc93e35849fb563c61b25250f145d00e02288208
-
SHA512
d4ffac5803b3c332bd8087169141bbec02f41d813b221783b2f42eaa96d6b1e5055bf295798f6528d46cd70bafd631055538a1b759b88b9ce7cf391d161e37d6
-
SSDEEP
384:pLdfCa2vDGDdapHm9BNmWMlEnL19sdbqpBBARbKeJH:2a2edb9HmZELLsdbIWRWeB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 311966a8e0638884466e8d4a08544ca8_JaffaCakes118
Files
-
311966a8e0638884466e8d4a08544ca8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
�s�0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�s�1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�s�2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE