Static task
static1
Behavioral task
behavioral1
Sample
5db49fd182117011e016652e5135d891_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5db49fd182117011e016652e5135d891_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5db49fd182117011e016652e5135d891_JaffaCakes118
-
Size
32KB
-
MD5
5db49fd182117011e016652e5135d891
-
SHA1
141b94197902f47dce118968aa7e35b264544968
-
SHA256
9527ae48865cac0a292eef009b48e31fa9d7534a0b20a27947a29577852eff14
-
SHA512
b44de5f71593505c218ff408d278ba58a5a35a5037499bccaa573dae86baf5f93dd237e7e3789e84c330234e01aa74aabe78e8f0498be0f26a861b7e48781e7a
-
SSDEEP
768:7jhBX74FwOWn6C66w7Nn8c667i6ncN+39GGk85fsPusG:7j78KO26DCc6gvDtI+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5db49fd182117011e016652e5135d891_JaffaCakes118
Files
-
5db49fd182117011e016652e5135d891_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
rg Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ej Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
57i8 Size: 945B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE