Static task
static1
Behavioral task
behavioral1
Sample
ce75ddef41160b3cdbaecc1fc4980dcb_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce75ddef41160b3cdbaecc1fc4980dcb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ce75ddef41160b3cdbaecc1fc4980dcb_JaffaCakes118
-
Size
26KB
-
MD5
ce75ddef41160b3cdbaecc1fc4980dcb
-
SHA1
ce186e68bc4ab761aaaea36a1a70a5d470256c1b
-
SHA256
d2c484d7e4b3c5dab84a3660f3eae80b755c8301f007083bcde64f914b944d52
-
SHA512
ddda5d25ff7dd417d49289199aa4d3952d2e40fd6098a32a654ee0727d5d8c408b2bc451c60fd2a8aa7ad5e56e6ff4ab284a80ada5990900f808d046939891d8
-
SSDEEP
768:VCsHxXG8+yjbWMIJ1vrZquGX/LfSOYetTHOTlj2tkmtzm:VCsHYSoDMuO/LaOFtDOpj2Vm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce75ddef41160b3cdbaecc1fc4980dcb_JaffaCakes118
Files
-
ce75ddef41160b3cdbaecc1fc4980dcb_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 367KB - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ