JnrOiop
Static task
static1
Behavioral task
behavioral1
Sample
a58e8e935341b6f5cc1369c616de3765_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a58e8e935341b6f5cc1369c616de3765_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a58e8e935341b6f5cc1369c616de3765_JaffaCakes118
-
Size
22KB
-
MD5
a58e8e935341b6f5cc1369c616de3765
-
SHA1
ad9734b05973a0a0f1d34a32cd1936e66898c034
-
SHA256
5b96b07528f762dfcb9d6936995ed4e358d29542ae756f6e5547fa3b5b7797b6
-
SHA512
a240d995b2af6fe4c87101a0843922814b8ea7bdc245da6b8a06f28d24e15d7d0a50f302d1d4182eed29f21f301f0c3a39d1c9789f313ab3ad133ce4eb4d2682
-
SSDEEP
384:/ir6UWNpwTOvEoa/ANsrwwCtN9Of+SS7Z86qV4e6XQAe7elBXv2zuucwGL4CsEa9:70aEB/gsatqf+57uUQAe7eX/AfhCK9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a58e8e935341b6f5cc1369c616de3765_JaffaCakes118
Files
-
a58e8e935341b6f5cc1369c616de3765_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.edata Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ