Static task
static1
Behavioral task
behavioral1
Sample
67b424e241147848265d13cfc222585a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67b424e241147848265d13cfc222585a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
67b424e241147848265d13cfc222585a_JaffaCakes118
-
Size
4KB
-
MD5
67b424e241147848265d13cfc222585a
-
SHA1
cd3c04d8ba74d57a16b969de2e9d7289b5aa182a
-
SHA256
15f0281e9744228c831ee995f4fb8865f09d97ed7ba836a9df2e07ce36da80b5
-
SHA512
9ce964924a77b77817916100fc3f4a27bdb7353b39d7f5ce40c2b4bd5466cc9c5255a366582c1f6ccbf21c4a1e2a1f4920ff6ca766bf88f1c92cea0ae02535f7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67b424e241147848265d13cfc222585a_JaffaCakes118
Files
-
67b424e241147848265d13cfc222585a_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 611KB - Virtual size: 610KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 21KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ