Static task
static1
Behavioral task
behavioral1
Sample
b14a7f5951cc0fb2d9929888ec7b3570_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b14a7f5951cc0fb2d9929888ec7b3570_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b14a7f5951cc0fb2d9929888ec7b3570_JaffaCakes118
-
Size
2KB
-
MD5
b14a7f5951cc0fb2d9929888ec7b3570
-
SHA1
f523d92241438992e6f9d7b0ebbe7e6e1fa645b3
-
SHA256
d9ed13575c24fb1374d35818409c83b96d88becbb07a5054a2fa03502f1e1624
-
SHA512
e384b771ecbac21fad8eaca53ff541aaa7e538416d1d3d2e9027bdb44409b41f677e31e1dc0327322cc2f37f9f9710dfe935e491dfce6cf528929565c75bb0ac
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b14a7f5951cc0fb2d9929888ec7b3570_JaffaCakes118
Files
-
b14a7f5951cc0fb2d9929888ec7b3570_JaffaCakes118.dll windows:4 windows x86 arch:x86
30523690db33ccbd045433fb0d5c243d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WinExec
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE