Static task
static1
Behavioral task
behavioral1
Sample
5b9359d9bc2a1df868887b66651e4542_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b9359d9bc2a1df868887b66651e4542_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5b9359d9bc2a1df868887b66651e4542_JaffaCakes118
-
Size
405KB
-
MD5
5b9359d9bc2a1df868887b66651e4542
-
SHA1
09aace02cd76e5015b42ce7ed771090b8d9b988d
-
SHA256
380c2a825a54edafdac06013cfa28cb73b41be365776c1070eec31215eaaab1a
-
SHA512
8eb8aa3cd60f7e701303f6cd7a5e246b937734b645b3febdfe770bddc7be15155a81c58be0fc7fe2806c8470b48ac871121464120769199877543eb21d903312
-
SSDEEP
6144:Jbd+Qy5rST6HoYcqCLGwcVl0KE0pGmxIsWiznR:JwZ5rSiCiLb0KENmqsWiznR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b9359d9bc2a1df868887b66651e4542_JaffaCakes118
Files
-
5b9359d9bc2a1df868887b66651e4542_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 377KB - Virtual size: 377KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ