Static task
static1
Behavioral task
behavioral1
Sample
656efd23eec4e62966f2a7aea543db31_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
656efd23eec4e62966f2a7aea543db31_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
656efd23eec4e62966f2a7aea543db31_JaffaCakes118
-
Size
85KB
-
MD5
656efd23eec4e62966f2a7aea543db31
-
SHA1
91a043b75ba3f85ffb6fc62250c6c4667412833e
-
SHA256
919b265627d23a602b2933c6d3378c3347151bd2a48fcf728c38ac6aa638c0d0
-
SHA512
2fd7f26ce077d90d0f5c0b5bd1e10e7c34d6c3f7f1d4a2df3f98cfbe7db9b9eb44339bba60af486b030be9987c35412969b40feabad98e682f6583375600e3d4
-
SSDEEP
1536:zkPh2+Jv28hccxAzK2L/H/cUgf2p7qlspbsmlQWUzIQq0oIUKv1GoajsCYpArz:zkPU0dhccxAzBHUUg+NjcBFoJKNG9qp6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 656efd23eec4e62966f2a7aea543db31_JaffaCakes118
Files
-
656efd23eec4e62966f2a7aea543db31_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 126KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE