CreateObject
Static task
static1
Behavioral task
behavioral1
Sample
a5b4fb83f7b06c84795fa30f1cb5eed4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5b4fb83f7b06c84795fa30f1cb5eed4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a5b4fb83f7b06c84795fa30f1cb5eed4_JaffaCakes118
-
Size
68KB
-
MD5
a5b4fb83f7b06c84795fa30f1cb5eed4
-
SHA1
0ef8413085abe158f82c8c24f3613f198713f5b0
-
SHA256
e02502bf7fd2892e9aa502fc674b27287156c115cc6d997893803e0d09113ea5
-
SHA512
b539d185aa52d4f1a196819566e95a86191d0aea9fbc92802e3ed2d925f31185366efcd41dbb7e120431c1b9c9c38d4b7e357ca2d3710b8a6b2ebbc4cacc5a49
-
SSDEEP
1536:azgm6q1LnQXnsyZ4zlOuJeVVoUWDDjjDVsTnnv6ejj:l87Kh2lOpCBjhJm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5b4fb83f7b06c84795fa30f1cb5eed4_JaffaCakes118
Files
-
a5b4fb83f7b06c84795fa30f1cb5eed4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MaskPE Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
wjyl1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ