Static task
static1
Behavioral task
behavioral1
Sample
692a5d33a32f81a546d8091689ae9a04_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
692a5d33a32f81a546d8091689ae9a04_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
692a5d33a32f81a546d8091689ae9a04_JaffaCakes118
-
Size
79KB
-
MD5
692a5d33a32f81a546d8091689ae9a04
-
SHA1
bab5e527896be01011888ee050f7ed03677b9812
-
SHA256
d344544e656dd2a31292a334c6ef4ac702f52d90f5e2323f61aa03c43cee144a
-
SHA512
2fb3fadb4724125b50cfefc47146980e748a91d926df759fd68f987faeffa447bd594d5a78c5f6a1478e6b671109c222a7714e32ddd12d8e55a6f177ae8437bc
-
SSDEEP
1536:y+qCQ6rbZpvnQxaxL69dDu5hcinToIfgjoi73K:5f3LnxLqdDu5iuTBfgjp3K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 692a5d33a32f81a546d8091689ae9a04_JaffaCakes118
Files
-
692a5d33a32f81a546d8091689ae9a04_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ