Static task
static1
Behavioral task
behavioral1
Sample
43138f6b9719af13d071e9e7053d0c51_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43138f6b9719af13d071e9e7053d0c51_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
43138f6b9719af13d071e9e7053d0c51_JaffaCakes118
-
Size
88KB
-
MD5
43138f6b9719af13d071e9e7053d0c51
-
SHA1
904b6f5391614a0bcff581cc29764e2765828dfa
-
SHA256
c148f5709c54e3e360b641a4c69e87e8589ae4c73a3fb62c73a26fa6f7053c5c
-
SHA512
e5813777e7252aec1319b22a4a09d337f7cf0ddbef3b4a1e8c6f22369f50a94c19fb00a92a5561a517ab73550fefa2b1cf626f5ed7ea41ee505159cef8beb70e
-
SSDEEP
1536:RPi69/QBA3nKIbkXVkvw16Zy4BZ4X/RGKaNO8oibDJykcy:RPi6d93wlkvcCD4XJGKaNtvJT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43138f6b9719af13d071e9e7053d0c51_JaffaCakes118
Files
-
43138f6b9719af13d071e9e7053d0c51_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 66KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ