Static task
static1
Behavioral task
behavioral1
Sample
c9849df27aba5c5d14eb66c8efb35674_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c9849df27aba5c5d14eb66c8efb35674_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c9849df27aba5c5d14eb66c8efb35674_JaffaCakes118
-
Size
3KB
-
MD5
c9849df27aba5c5d14eb66c8efb35674
-
SHA1
4419349185ad456eb90774ecb66efcb7b2a0f329
-
SHA256
5c23819d68490a64ab1bad7b58489a30ca8224c5b3a5e55d01fcc71f5481f94e
-
SHA512
06a003dc9aa0398ff45724b1d94fa2eb7d5e1905aef46fb0416ff67bbd1b37cbc493dd35bd6b14df9be0f4c15f9017c12b426e0a76222c249f831ebd5c68ab6e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9849df27aba5c5d14eb66c8efb35674_JaffaCakes118
Files
-
c9849df27aba5c5d14eb66c8efb35674_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ