zyd16
Static task
static1
Behavioral task
behavioral1
Sample
65936d86375c9abdee696abe276de13d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65936d86375c9abdee696abe276de13d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
65936d86375c9abdee696abe276de13d_JaffaCakes118
-
Size
29KB
-
MD5
65936d86375c9abdee696abe276de13d
-
SHA1
f913abb65399230e00ba388efca4637cdb3ba946
-
SHA256
7ff95b2e76ce0d4ae88e300a65832537b8f863ed35ceaaa8ba6c3fc9a2dc7715
-
SHA512
67b2887c02909d86154e4cb327a50a20d896c1b2d070195ba4b68edefe397851fa647689311b04760f30257c075f77df48bdc8a15bb72b140b4fef0a7d229575
-
SSDEEP
384:myuzmk3ySFy81TvV5Olz9HkGlY8MkWCv5T6ibhaF4MdpnZ2FC1l1a1fD1Cqp1LDq:+M81TvV5EhkWYnCv5T6GrOJqfCLN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65936d86375c9abdee696abe276de13d_JaffaCakes118
Files
-
65936d86375c9abdee696abe276de13d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ