Static task
static1
Behavioral task
behavioral1
Sample
36f8588877d5151e325e35144ef43bfb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36f8588877d5151e325e35144ef43bfb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
36f8588877d5151e325e35144ef43bfb_JaffaCakes118
-
Size
96KB
-
MD5
36f8588877d5151e325e35144ef43bfb
-
SHA1
4714cd1423444a99c3776a12ad1ef6ad376a5623
-
SHA256
517dd870ca4e42a6311d49c16717fe9689d9568f8328023f1128585f6f78c210
-
SHA512
7b24c6d2f243247c59dfbd37027b271c493d73585f9c564f78d70f613d9c3ad6d76029d086ced85a3bf75b10531aa1ebd19a279f5e5e88cbc5a8beccdafff326
-
SSDEEP
1536:am3j6Qs9o+rK889Wlpft4xHw4mmwHgkwoxTW4fapYNqPzW9JdDcl3hEwqh1x2XUy:auj6QX+rH8yiW9JdDa3hEwqh1x2XUYoC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36f8588877d5151e325e35144ef43bfb_JaffaCakes118
Files
-
36f8588877d5151e325e35144ef43bfb_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ