DllEntryPoint
Static task
static1
Behavioral task
behavioral1
Sample
95111c94c15a6d17ce8496344b4aabf5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
95111c94c15a6d17ce8496344b4aabf5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
95111c94c15a6d17ce8496344b4aabf5_JaffaCakes118
-
Size
503KB
-
MD5
95111c94c15a6d17ce8496344b4aabf5
-
SHA1
5d6382052f6585277178603b0773ae36f7e21924
-
SHA256
310b8cda0cc3e3cab07b1fe6630ad3c7fdebeeaf2dadfe455ad4ff09b7148155
-
SHA512
ee0a0eb1b7b20d9cbfeb83a22c7d39871dbfde5cc88ebd291c1ee6834e68daafcfae139d91938cc272b603e3ffd6d4452f5b02807071d6ebb2ba3a22f74093ca
-
SSDEEP
12288:dNQoIGmnBgipq5Tv/w2KFAVQO8HBHNnXnuI6n7q+CCEol82A0O9xMER:HhTv/w227BHNnXnuT7ROol82A00rR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95111c94c15a6d17ce8496344b4aabf5_JaffaCakes118
Files
-
95111c94c15a6d17ce8496344b4aabf5_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000 Size: 494KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE