Static task
static1
Behavioral task
behavioral1
Sample
ac5733084e88f942ab698a1636ec6876_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ac5733084e88f942ab698a1636ec6876_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ac5733084e88f942ab698a1636ec6876_JaffaCakes118
-
Size
606KB
-
MD5
ac5733084e88f942ab698a1636ec6876
-
SHA1
03e5032bec07da98ed71aa0ee71e627d1f235d3b
-
SHA256
c960d05d3f286c59ab559909a700727a7fbcc41df037eb27ea633accf4b2bea2
-
SHA512
951d563c833d025aa0495bd2b869469dfd076b05b95b516c7622fb378459cd536e11c35d738d4898f86f2e605e46e85e4f383d9dd3c97c48f8b5910b657e7b2b
-
SSDEEP
12288:swUrxqj69iSxqnFn+Hn8fG3zds6O5UmYmovM1lDoYEg0vXLv33yb:svrYjU8fG3zmR5UmY9U1/dQjyb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac5733084e88f942ab698a1636ec6876_JaffaCakes118
Files
-
ac5733084e88f942ab698a1636ec6876_JaffaCakes118.dll .js windows:4 windows x86 arch:x86 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 596KB - Virtual size: 594KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ