Static task
static1
Behavioral task
behavioral1
Sample
5ed75eaee22d062d7c367f4f0a137207_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ed75eaee22d062d7c367f4f0a137207_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5ed75eaee22d062d7c367f4f0a137207_JaffaCakes118
-
Size
523KB
-
MD5
5ed75eaee22d062d7c367f4f0a137207
-
SHA1
4f67a65a5269ec1ea8be485dd310198c84252716
-
SHA256
9083c99f1855a5636c4acfb4e1ea7f41c5b9856c1cb0b4a4e835c47859974f50
-
SHA512
33b435ea89805b5f69fe5109a6ee71d3e3bfcc4aa70b0807a9870ce4b9cce43d3f9829f777c7843ab9d376e6868850551adacfc90c176d944d7a5be446531981
-
SSDEEP
768:zQL2xFqIY1RNrmSR70+xkQShyt/2hkPk+++++++++++++++++++++++++++++++G:zA8q/pkJe4kQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ed75eaee22d062d7c367f4f0a137207_JaffaCakes118
Files
-
5ed75eaee22d062d7c367f4f0a137207_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ