Static task
static1
Behavioral task
behavioral1
Sample
314d5da8da2c9bb6754f50369e69be2c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
314d5da8da2c9bb6754f50369e69be2c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
314d5da8da2c9bb6754f50369e69be2c_JaffaCakes118
-
Size
2KB
-
MD5
314d5da8da2c9bb6754f50369e69be2c
-
SHA1
3a3a2326715396533733620754661818a7f93f2d
-
SHA256
4430f8d3c6a8836c0d32ce77221dd17f5793d4697f473b63e30b082fa0865d34
-
SHA512
d43be1ab8748356dc3209ba623dc67426ee0a9ee49b0fe622952384fb4051fa4fbf970f34475cbe314ecddfb061f4c17a831aabfd19f9c9fc1a869fb5bb4a0e3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 314d5da8da2c9bb6754f50369e69be2c_JaffaCakes118
Files
-
314d5da8da2c9bb6754f50369e69be2c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 1016KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ENGINE Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_BOX_ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE