Static task
static1
Behavioral task
behavioral1
Sample
ae5a35129b679a640f63ba3668271983_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ae5a35129b679a640f63ba3668271983_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ae5a35129b679a640f63ba3668271983_JaffaCakes118
-
Size
49KB
-
MD5
ae5a35129b679a640f63ba3668271983
-
SHA1
23fccc4ca879635f3f2f02977d27f7dd45cad7ed
-
SHA256
fefde91931a106622910d04e2fe7a373f54bc0a3c737560f08c88749814c7479
-
SHA512
f854010b5462b770c48b507420e1d26b93c0606fbd508a0667f293e294ca43ffe5b5d17b0994e415c5e889f339e526992d1b1c6e0c5bd7643ff6bb0a5e84657f
-
SSDEEP
768:yBxAPm2TVsZMUqtcAooJCggW9yCZIxzTvwdLR4xfhiet+r3aYM9igUNBW:UH2TVsZfqtjgggWsCUTveRXr3icPBW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae5a35129b679a640f63ba3668271983_JaffaCakes118
Files
-
ae5a35129b679a640f63ba3668271983_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE