run
Static task
static1
Behavioral task
behavioral1
Sample
b74e0b6837621152be74ebf4183e79d5_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
b74e0b6837621152be74ebf4183e79d5_JaffaCakes118
-
Size
14KB
-
MD5
b74e0b6837621152be74ebf4183e79d5
-
SHA1
39cf9f782257881943db93ee6f3459c8ae6a784b
-
SHA256
2dbb0786ca3cec30d0f8466fd6aae02943f1b98acc1130f5d7603205d7038148
-
SHA512
c57aedbf320341ac73648eaa7b64a5577ed70338ee67db4e2541a94337949a8d6c78a5411b3ba5a940f128f61b986f17843ea2a508a0750718276f2563dd319d
-
SSDEEP
384:pDrfza2vDxru5KyxdCTCIrcHzWoSz9mSbef0an:5a2Vru5dCnrcqbGfzn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b74e0b6837621152be74ebf4183e79d5_JaffaCakes118
Files
-
b74e0b6837621152be74ebf4183e79d5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
+ 90 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
+ 91 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
+ 92 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE