DllStart
Static task
static1
Behavioral task
behavioral1
Sample
c77218b8ced073e4d1a47e365a8132f7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c77218b8ced073e4d1a47e365a8132f7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c77218b8ced073e4d1a47e365a8132f7_JaffaCakes118
-
Size
247KB
-
MD5
c77218b8ced073e4d1a47e365a8132f7
-
SHA1
eef8b1fdf3adac7c21a53669d4c0c4a84e3c254a
-
SHA256
47c90870df48073c5dbb94101d14b5c5d9cc47f949c2f1ac0afe0a5e0a3fd587
-
SHA512
bf6005e46809f9ece7911de4bffef6dc19fd5dac333f8f9a742bdc43160bc665b88d5b6cfce1f7cc0dce16091a3510a81cecc389f3064019ffff4411d76afb3e
-
SSDEEP
6144:H94nDWgRAkPprpWd1iBcdbWS0X3lnRsQcMlxqHDlCG6YJzrnz1Ms:HQR3PpOimU3lnRXTqHDe4rnd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c77218b8ced073e4d1a47e365a8132f7_JaffaCakes118
Files
-
c77218b8ced073e4d1a47e365a8132f7_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.textbss Size: - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 280B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 72B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ