Static task
static1
Behavioral task
behavioral1
Sample
b3ce2cba21fb695943ef305cd70f24a2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3ce2cba21fb695943ef305cd70f24a2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b3ce2cba21fb695943ef305cd70f24a2_JaffaCakes118
-
Size
472KB
-
MD5
b3ce2cba21fb695943ef305cd70f24a2
-
SHA1
2f5ae7231b8e95a2fa6183b0d6784d90721a7309
-
SHA256
57e6c60abf965fee9b40c051e9e7791f3a2caff9a0f56f5e6fa10e6f1dba2c44
-
SHA512
7c373edc5d3611c873332c565e42021f0208271a5978594634a3dd71639fab6d46758541d71b911ca6990df0261248ca2e0343c08605b49fd9e6e8502cac4f53
-
SSDEEP
12288:dpW/tEWwPbb+L3OXUE9drnYvI0zzu4Z21WBt+RLMkbgqcESriiwcKPz6kS4q6:dK+jdSfuVskGcGkn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3ce2cba21fb695943ef305cd70f24a2_JaffaCakes118
Files
-
b3ce2cba21fb695943ef305cd70f24a2_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 419KB - Virtual size: 418KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ