Static task
static1
Behavioral task
behavioral1
Sample
5df678a68d554346e89c018880e6c24a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5df678a68d554346e89c018880e6c24a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5df678a68d554346e89c018880e6c24a_JaffaCakes118
-
Size
71KB
-
MD5
5df678a68d554346e89c018880e6c24a
-
SHA1
0fef5543f436d5f8000c113b61f1318b57e256fb
-
SHA256
f25198073e513abfd35fd0a9c07158b208c1e881d8e46f56067338b42bd67f10
-
SHA512
1c5f826ef8a8c2268766e94c6d2bd0a4f65af4c57178631cbdb30cbf841ab056087e88f14683b97ef7e333d38b9cd71ed28a8b5f2afe1813a5275751dc3367e0
-
SSDEEP
1536:EDdF8uHZqGTV6vCVAWsNnkzsgQapauTn8OBaAlTMnhDXfWGkSRwrHQEtut:EDdFHHZqGTITF0sgQsauT8N+y9fWMRwa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5df678a68d554346e89c018880e6c24a_JaffaCakes118
Files
-
5df678a68d554346e89c018880e6c24a_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ