Static task
static1
Behavioral task
behavioral1
Sample
5c72798ca20daec67a302b5b1a624702_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c72798ca20daec67a302b5b1a624702_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
5c72798ca20daec67a302b5b1a624702_JaffaCakes118
-
Size
126KB
-
MD5
5c72798ca20daec67a302b5b1a624702
-
SHA1
a7ca4705d40dbe98eba6b6f7a3b4710510811ee1
-
SHA256
a7d872acb82839a0114defe5dd4e5a980f20a7d37933f90a5b19ed304701b5ae
-
SHA512
e978d3ac4b708ae998e27f1f670cb03e134dad7e9fc2e33b110d9b6fea27bfd0fb271db4bbc27fdf02e91fd9874db293098615229af5c50cb90e05c3541d1ba6
-
SSDEEP
3072:e/X91U5CACDWIYsLq2F5ho1HDVm9ubQYN:e/t1UAlYsuE5hED49ubQY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c72798ca20daec67a302b5b1a624702_JaffaCakes118
Files
-
5c72798ca20daec67a302b5b1a624702_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�text Size: 107KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE