Static task
static1
Behavioral task
behavioral1
Sample
ad755ba05d32d9cc0e0aaeb5bb880c74_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad755ba05d32d9cc0e0aaeb5bb880c74_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ad755ba05d32d9cc0e0aaeb5bb880c74_JaffaCakes118
-
Size
315KB
-
MD5
ad755ba05d32d9cc0e0aaeb5bb880c74
-
SHA1
470323ae5a5decb0c3d43e095855d7bffbb290fb
-
SHA256
0ee0ec3119e0e1ac49eb8bac563afaaf8a64e57a4d99e47d9aeabb4d614651df
-
SHA512
118665b8a3b0bdd870fbb4454228e0891a0bcdce84802fdfcf7575e5766f513fae35513528befa2cfdfa097c7bff5c808ca55c22f412910205fc1cc4f87dcc6d
-
SSDEEP
6144:dLavqzGOoVud0DElLgANamGgMmeIG0ThXcpPs2Ahz1ORKcsfc/F:YvN/VClMcMmel21ORK70/F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad755ba05d32d9cc0e0aaeb5bb880c74_JaffaCakes118
Files
-
ad755ba05d32d9cc0e0aaeb5bb880c74_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 226KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ