Static task
static1
Behavioral task
behavioral1
Sample
397b763a5ea58fd64e99fd058a23b2f1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
397b763a5ea58fd64e99fd058a23b2f1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
397b763a5ea58fd64e99fd058a23b2f1_JaffaCakes118
-
Size
51KB
-
MD5
397b763a5ea58fd64e99fd058a23b2f1
-
SHA1
708104daca7d3a6393e6c63c4dc6305fd03c6e14
-
SHA256
14caa3da2587814d2bae4e167ebbe232415abeb889bea2dc88dccf7c7a9f6f9d
-
SHA512
50d35748c3713aa251f8e89e699fc7bb871d8fac558bc98a52215072cc5ff82245a6ee6e40db559c20ea8ee54b6a5a06a49159f3d0674d082e15263fce23ed86
-
SSDEEP
768:MM5U/M7utvHJz54W+Qyl2Iq25IHuHEKSbzgRuTcDqnM3W0/2Qd:+/Mat/f+l2f25IHuHSbzg4gJm0/28
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 397b763a5ea58fd64e99fd058a23b2f1_JaffaCakes118
Files
-
397b763a5ea58fd64e99fd058a23b2f1_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
EDATA Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ