zyjkl
Static task
static1
Behavioral task
behavioral1
Sample
b015e81d37e0a3cca2783213da0dad97_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b015e81d37e0a3cca2783213da0dad97_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b015e81d37e0a3cca2783213da0dad97_JaffaCakes118
-
Size
28KB
-
MD5
b015e81d37e0a3cca2783213da0dad97
-
SHA1
87c214ff40736ad1702a578087637dd7e8b46eaf
-
SHA256
d289740ac128522bd42232d5a4b2e6a4e7097c91342c947a676b97de52ebc8df
-
SHA512
11bf147e97904595cb64fadffe7b6c28c6d27da67370bfcd227990cc3f56497a15892f5d36cda759c3bd05548932e73e235098b6cea0cb05928623a65caaf7be
-
SSDEEP
384:5yuzmk3ySFy81TvV5OFz9X30WkOAYoMUd6ksBDEsTmdocDd7KLFqkXlAzf+:HM81TvV5EZ30WoHG4j7Ky
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b015e81d37e0a3cca2783213da0dad97_JaffaCakes118
Files
-
b015e81d37e0a3cca2783213da0dad97_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ