Static task
static1
Behavioral task
behavioral1
Sample
81c8386fb1dad7d09b4b3ae79c9d2df2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
81c8386fb1dad7d09b4b3ae79c9d2df2_JaffaCakes118.dll
Resource
win10v2004-20240730-en
General
-
Target
81c8386fb1dad7d09b4b3ae79c9d2df2_JaffaCakes118
-
Size
75KB
-
MD5
81c8386fb1dad7d09b4b3ae79c9d2df2
-
SHA1
a409bdcfb2a34a0a92444a06afdb10262832c18a
-
SHA256
37be9cdbc5232625e80c91447456ba08ad08f374867b03914c15902359ed4d21
-
SHA512
1bb7062124d8d9beaf8470b8826f52e0184e3467bb93880e917b7f0517e00730234159f10bb7fc2a34bf71d9b970d873038a0fe1777ea2c3ecd141a8bfdd4168
-
SSDEEP
1536:UzPGCq/0hgo6218ulD2Fzm4kJJmtITeFrOgektHDSJ8o0HuDXn:UzPRo0CoNbD2FzUJJRekg7tHkoo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81c8386fb1dad7d09b4b3ae79c9d2df2_JaffaCakes118
Files
-
81c8386fb1dad7d09b4b3ae79c9d2df2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.data Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ