Static task
static1
Behavioral task
behavioral1
Sample
bdfdf7faea1bd0341460f8cc372064d3_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bdfdf7faea1bd0341460f8cc372064d3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bdfdf7faea1bd0341460f8cc372064d3_JaffaCakes118
-
Size
62KB
-
MD5
bdfdf7faea1bd0341460f8cc372064d3
-
SHA1
7525e52dd9b632d4d715be082c49d2c2fe1b5592
-
SHA256
62128e493f14ae4c1c1f15a1014e0fe03c96878a792335a664147aae3c01c073
-
SHA512
3b4832a5baa097602c9a43dcfee77c9de5dcfe69b023b4dd219ce8568181123a1c86531068a16c057f40b668b68f9686d671542004b684a1f193e74a4ae8f2fc
-
SSDEEP
1536:utnSf7mzYiBfI/Xce/4zjUcVkFPoChMTeTQE5EoRkQYByhMQ:WRJI/X//5hMSTQLByhMQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdfdf7faea1bd0341460f8cc372064d3_JaffaCakes118
Files
-
bdfdf7faea1bd0341460f8cc372064d3_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ