Static task
static1
Behavioral task
behavioral1
Sample
5fa9865633b82897f5f3d1b57a4eb432_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5fa9865633b82897f5f3d1b57a4eb432_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5fa9865633b82897f5f3d1b57a4eb432_JaffaCakes118
-
Size
82KB
-
MD5
5fa9865633b82897f5f3d1b57a4eb432
-
SHA1
2ff46e5c6f298961998f88361741b75e37f41713
-
SHA256
9d76a446bb028a91b08c9e207dc8cad9cee8cbcac28c76df740b64be8a2eb027
-
SHA512
acbe29dae953916b5b8aa61a35483e15e23bf63caf398201f252545a8d500ba0eeb28189883dadfafeeb85867b33036ac27ca538e03ea80fe746644097af546e
-
SSDEEP
1536:VwBMhOAKqFCt9GqITUXvrIBG12qwFaUiVJvUGdRlxOAshXHOJD4pv6:mBMhpJCNrvkBO0F3qx0m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fa9865633b82897f5f3d1b57a4eb432_JaffaCakes118
Files
-
5fa9865633b82897f5f3d1b57a4eb432_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE