Static task
static1
Behavioral task
behavioral1
Sample
d20df85034380f76bb52250805ac5731_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d20df85034380f76bb52250805ac5731_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d20df85034380f76bb52250805ac5731_JaffaCakes118
-
Size
37KB
-
MD5
d20df85034380f76bb52250805ac5731
-
SHA1
9aa15822c30b3bcc689b256188961b7881c50c5f
-
SHA256
c8ba4ba05cad61a5c126331d61fcd9fdcac65e05976977750032b1d089882176
-
SHA512
edcadd186920b01cf8935e3dc51db1f9be93abb05eaa98075dcd56e80046053305b45078b7a91064dcd843b850b5680a715300326730733ea2da6661590330ca
-
SSDEEP
768:VcQAxkfTI51j117xGL06Rx/hythQKOwzt5GPA7wJdMNE:J1LIPxiRRhOQnwzt5mJdMW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d20df85034380f76bb52250805ac5731_JaffaCakes118
Files
-
d20df85034380f76bb52250805ac5731_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ