Static task
static1
Behavioral task
behavioral1
Sample
70006834a7661462a638f7841f24542b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
70006834a7661462a638f7841f24542b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
70006834a7661462a638f7841f24542b_JaffaCakes118
-
Size
93KB
-
MD5
70006834a7661462a638f7841f24542b
-
SHA1
c7bebb0f565df2a8bbf237fdec2080f92d84c8f8
-
SHA256
b7bd58331b5215799c2c17ad96e88a1d8e33158d313a568d09de9a7fb9ba6f36
-
SHA512
9eb99cb005649eed1da4038c2f7f6715027db836cc3481f44f8cc25caa7573300a6e49dfe33b5d57fb4ab8e2f8bf5d8a8b99f9b5ec07733b98f66091af9309c8
-
SSDEEP
1536:7LhsYjhgw51sKJTAbAlAf4+kmmScYMlsPKXlNH4gbHEmU:7LHFsKJTMMJ+OsP2d4WHr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70006834a7661462a638f7841f24542b_JaffaCakes118
Files
-
70006834a7661462a638f7841f24542b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.perplex Size: 1KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ