Static task
static1
Behavioral task
behavioral1
Sample
4aec2c764a5f934be86e4e0fed832f9c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4aec2c764a5f934be86e4e0fed832f9c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4aec2c764a5f934be86e4e0fed832f9c_JaffaCakes118
-
Size
60KB
-
MD5
4aec2c764a5f934be86e4e0fed832f9c
-
SHA1
7860fbfd9933810638ebf911128f1625986f170b
-
SHA256
33e059851d9570c844d88c6f82c7edbc2bd7db6edec4f6b08160db2ba7aafc16
-
SHA512
a9c493d5cad6e880893b75cf73b690e974bf3f662af208f84194f1fd2b44ffd38162e98a62ef8544d5aac59774147d146464d9906993369b190340de90abc376
-
SSDEEP
1536:aTs/bsR0iSQIXB7g7SVI5RY8MtPbwTomzBXMTg38Qpl1A3zSnQpDEuWjIeRPN76S:ks/bsHSQIXB7g7SVI5RY8MtPbwTomzB1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4aec2c764a5f934be86e4e0fed832f9c_JaffaCakes118
Files
-
4aec2c764a5f934be86e4e0fed832f9c_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ