Static task
static1
Behavioral task
behavioral1
Sample
5e00cf3e2d33e82c418fdc8a2ef75c71_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e00cf3e2d33e82c418fdc8a2ef75c71_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5e00cf3e2d33e82c418fdc8a2ef75c71_JaffaCakes118
-
Size
152KB
-
MD5
5e00cf3e2d33e82c418fdc8a2ef75c71
-
SHA1
8224cf8ff46aebbde707a2d400679863b2b37882
-
SHA256
414ad020c75a90ccdd8fff29f865be2e4f74a1feb53237941d4cfef6e7d0e6c6
-
SHA512
aafbfb49e0b2c7075a2f818aa5947a5b5341119e556b1d7b6b5582e20d82817d249e40bc55879c0ddc321757701ba97e21ef614cc2f78e035e44058d6039a362
-
SSDEEP
3072:MEvfwKNZcdwsu+gD6dU3VSFVQCNzEwrP7DQMUsMLqEug+1:Mlkcysu+geZQSEEDDiug+1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e00cf3e2d33e82c418fdc8a2ef75c71_JaffaCakes118
Files
-
5e00cf3e2d33e82c418fdc8a2ef75c71_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.textbss Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ