Static task
static1
Behavioral task
behavioral1
Sample
be0185ad0a526a1fdb915237141ad429_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
be0185ad0a526a1fdb915237141ad429_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
be0185ad0a526a1fdb915237141ad429_JaffaCakes118
-
Size
20KB
-
MD5
be0185ad0a526a1fdb915237141ad429
-
SHA1
f79f77132abc48835c6d91f0875be12598c9c19c
-
SHA256
c401ddc9d9151ef8611aae407a7259b8fc1e96d8f7a96b0d7fa8dffdbee9f334
-
SHA512
9df950477ebdc4f8da0f8bac476660ae95ed049ec0931d50f9864d64b0211084dbef1d7277acb5157475b8d8ab84cfb1233ddc19a6fc1749f36d28365f2fc8d3
-
SSDEEP
384:4hk8ZFmVtsGNNfBqFxAlC0umSa62fv2Ys12OjpSzvJw:eg2GNWTAlebRpSrJw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be0185ad0a526a1fdb915237141ad429_JaffaCakes118
Files
-
be0185ad0a526a1fdb915237141ad429_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ