Static task
static1
Behavioral task
behavioral1
Sample
93c31496ea6203eb2532b837a42a3ba1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
93c31496ea6203eb2532b837a42a3ba1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
93c31496ea6203eb2532b837a42a3ba1_JaffaCakes118
-
Size
66KB
-
MD5
93c31496ea6203eb2532b837a42a3ba1
-
SHA1
41e7e3242c0724119432bd0f4d0c8aef61805e95
-
SHA256
a7d9f4a1ee3a9e6346afce82cfa6c763a04949cc121ae42b0d8f2d16e49afcef
-
SHA512
0ff71b335d23ccd029e7fb19f28acff674d53edd3165e81772f6ff24461b65a4ca54ba6b289e69f767d438d54de8c910b8b7fb182e7439027dc06578512b0e87
-
SSDEEP
1536:yWw1L1XHSGG/wuHiCe2rujEJnklEogR2Rj07Xq:Y1ZXyGEwuHHe1jEJn2gRMjq6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93c31496ea6203eb2532b837a42a3ba1_JaffaCakes118
Files
-
93c31496ea6203eb2532b837a42a3ba1_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 337B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ