Static task
static1
Behavioral task
behavioral1
Sample
5a46cf1651889b8923a7a0cbc7514441_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a46cf1651889b8923a7a0cbc7514441_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5a46cf1651889b8923a7a0cbc7514441_JaffaCakes118
-
Size
93KB
-
MD5
5a46cf1651889b8923a7a0cbc7514441
-
SHA1
e18dd8fcee0d331de3a17c07b75b895d0cdef9b8
-
SHA256
8f80268caaf225be69e4eb6feaa341c695e8d103a5f9af288436f906f75c8714
-
SHA512
b1f39c103b1e5c5cf284ff0edf1e8a029205b0e8299462e9f43630a4e838dbfa343b1fdea9eac7c230cbd819a14b032d5ab7c0e75f50bbfdb37af45e582bfbe9
-
SSDEEP
1536:s7J+Gf83ITXPtI6ldGgTFvMKoR+sCHIwI5IqpfFu3OJk2wSNuTQAV:s7JJTtI6djtMKo3k7I5IqpMqwSNYQU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a46cf1651889b8923a7a0cbc7514441_JaffaCakes118
Files
-
5a46cf1651889b8923a7a0cbc7514441_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
CODE Size: 19KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE