Static task
static1
Behavioral task
behavioral1
Sample
4829fa768de37c315a3a3b7bca027b64_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4829fa768de37c315a3a3b7bca027b64_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4829fa768de37c315a3a3b7bca027b64_JaffaCakes118
-
Size
156KB
-
MD5
4829fa768de37c315a3a3b7bca027b64
-
SHA1
a256f622a6209ec21a13d490443ffd6dbda4f5b7
-
SHA256
163afc9e38ce75071c914d0b57a8be9945bb64451194c8204001b17927645c93
-
SHA512
a69f719eca9db29ebe5cdf587ea18d8cc6d455ca639a6a34ddcc6200ffdcab7b9fd053409c2da4e37a9ebc164bc780ade3f7520b28c225de28c8897718fbb6c9
-
SSDEEP
3072:rTVJsPtUuGbtSBsh7+X7q7hG5JZ6XdPPnHNSb3GmJZPobh8duqW:rTvsPmuGbVhSXVLYP4bjgbAu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4829fa768de37c315a3a3b7bca027b64_JaffaCakes118
Files
-
4829fa768de37c315a3a3b7bca027b64_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ