Static task
static1
Behavioral task
behavioral1
Sample
490dbd43badfdb9f0f73ec739251559a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
490dbd43badfdb9f0f73ec739251559a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
490dbd43badfdb9f0f73ec739251559a_JaffaCakes118
-
Size
48KB
-
MD5
490dbd43badfdb9f0f73ec739251559a
-
SHA1
f1c47e915da95b149d11bd5bd454ac9fa4c2bd10
-
SHA256
52823f77a637b0440ada5165bf4bd0b5c2937db76ae909ae744dcdaf41d7216f
-
SHA512
5dc1de6120c50c4c95aa2e91528c54c284fc1e9619b3a227a484a9fe965b4f41f75b8744499d5d4f04e132cbf0c41d539e15a7eea2717f08fce40c294cd75806
-
SSDEEP
384:BC/9G34ilQ4ZgS7baqW5WqWcXRbvaQeDM7r/+lVmDaShLr35+lH7uZP/WPAvNx1O:I/zilQ4ZruNcMBK7yhXGTFef+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 490dbd43badfdb9f0f73ec739251559a_JaffaCakes118
Files
-
490dbd43badfdb9f0f73ec739251559a_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ