Static task
static1
Behavioral task
behavioral1
Sample
baa3255b021510dc64b3ba9ab0e28020_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
baa3255b021510dc64b3ba9ab0e28020_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
baa3255b021510dc64b3ba9ab0e28020_JaffaCakes118
-
Size
72KB
-
MD5
baa3255b021510dc64b3ba9ab0e28020
-
SHA1
bc0dea97f7f45a5de6b5517f32979bf9986150c6
-
SHA256
d29849587295b063bc2fa618467913ed26df34b3e4f98966fa32fce785791865
-
SHA512
a2ec223f545b1c473f40e522ae84852919f8de914a26d225bfd6d98f86f4b3bb2c8603b02acc0cdbed124a5d6a408eac8f03f509bc7ce4edae5841e164e6eb45
-
SSDEEP
1536:jMHvEElBVU4Q8wvSzki8c3/fUaK33qJODiTHnHf0:IHvLbVjKSz93c3aJOD6HnH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baa3255b021510dc64b3ba9ab0e28020_JaffaCakes118
Files
-
baa3255b021510dc64b3ba9ab0e28020_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 815KB - Virtual size: 815KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ