Static task
static1
Behavioral task
behavioral1
Sample
a2aa659781c42711e10ef81eb35be445_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a2aa659781c42711e10ef81eb35be445_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a2aa659781c42711e10ef81eb35be445_JaffaCakes118
-
Size
38KB
-
MD5
a2aa659781c42711e10ef81eb35be445
-
SHA1
1ca320dce73f880e41d6afce2065e708b9aea0c1
-
SHA256
6612dc816a7aa4f1a8330ca96cd8f20808c7bfa3eb510b8afd774f7a1dff88a9
-
SHA512
adbbd4cf23249ba3f54fce86e6af488c9dbe92b595e67374f47773aba6d5788132354bd62c839d45da567f30f0c233969fc07836842ec9dbda377bd63fa8f88d
-
SSDEEP
768:EB1EJ1iaYU1XZyaPVe8N7IJaBVPUL49hcmrWhd/7EiOJK/9:c1Ema5XNeglBVu4MmrKdDi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2aa659781c42711e10ef81eb35be445_JaffaCakes118
Files
-
a2aa659781c42711e10ef81eb35be445_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE