DllStart
Static task
static1
Behavioral task
behavioral1
Sample
3c14a428db7179e683970ce8b411dde1_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c14a428db7179e683970ce8b411dde1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3c14a428db7179e683970ce8b411dde1_JaffaCakes118
-
Size
212KB
-
MD5
3c14a428db7179e683970ce8b411dde1
-
SHA1
c3b9fe3452a79c9e5b8a1649e392032621b8566c
-
SHA256
138f27f07de4e0133a0f9fd0af37e3970d2ef22739e3e4475740cd7c2b32efca
-
SHA512
cd2c5ec71b1033cb465b8445d28c12e58b9312629a7b7a26a428d2244dd5fd29b5704afe50175eb24a394366ec465af533aee3606cd14989a3f5d8a5f6ef93bb
-
SSDEEP
6144:5Bv4nDWgRAkPGsFz433smozFb1Hy9GGiUkUqR:WR3PbFz433smoFp4vZkUq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c14a428db7179e683970ce8b411dde1_JaffaCakes118
Files
-
3c14a428db7179e683970ce8b411dde1_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.textbss Size: - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 206KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 295B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 72B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ