Static task
static1
Behavioral task
behavioral1
Sample
641fe871d239c5f82ba385f243ca2f0a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
641fe871d239c5f82ba385f243ca2f0a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
641fe871d239c5f82ba385f243ca2f0a_JaffaCakes118
-
Size
116KB
-
MD5
641fe871d239c5f82ba385f243ca2f0a
-
SHA1
25deed53220178110433dd91904a20478bc4ab90
-
SHA256
b703b471ac035feef664a82beef67423181d7ce14945ee749eb0aaa89e17cfe9
-
SHA512
219ee58a9503913b3221451e11cf253e901f4afb46567aa53625847043cdbf9b91ee8f8b59dd1a68891e4b5dc4e40d5093c9178b1592ee3d72cda80b7a9d531c
-
SSDEEP
1536:NP0ZQ3xawGfOcnJ/n811z4BjucXr/Fo8nZvu8o:p08IwFWJ/870B4SZvu8o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 641fe871d239c5f82ba385f243ca2f0a_JaffaCakes118
Files
-
641fe871d239c5f82ba385f243ca2f0a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
share Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE