Static task
static1
Behavioral task
behavioral1
Sample
396b77b6090d66e8ba7917ecf67c6d46_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
396b77b6090d66e8ba7917ecf67c6d46_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
396b77b6090d66e8ba7917ecf67c6d46_JaffaCakes118
-
Size
70KB
-
MD5
396b77b6090d66e8ba7917ecf67c6d46
-
SHA1
3fafe94efcf56cc4c2ca2d30013e9111bbced751
-
SHA256
f8c032756ef871fb603979230a8bc6e865c81ef4276427850b4bc897ba1a74d0
-
SHA512
f45505b0ef01103ee8d89ed8d5de7d1d24422594620adc97aa33da3b852d35ba52f4f5e7113f005814c370ffda138ef1f4e8236d66e4a2544831f94538458501
-
SSDEEP
1536:WqUHv1MWLkmHfIZ/+f6FyuU27be7FNre+CqmF8QpRzmUX1N:Qv1VLXIZcz2Pe7FJe+CMQpR9N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 396b77b6090d66e8ba7917ecf67c6d46_JaffaCakes118
Files
-
396b77b6090d66e8ba7917ecf67c6d46_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.code Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE