Static task
static1
Behavioral task
behavioral1
Sample
d268009a721ac1263fd448040705eca6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d268009a721ac1263fd448040705eca6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d268009a721ac1263fd448040705eca6_JaffaCakes118
-
Size
2KB
-
MD5
d268009a721ac1263fd448040705eca6
-
SHA1
4282ada6bcbbc1673d4ec8cc3270472b704ebf34
-
SHA256
574f2028a7cd1b874a1b9ff1d2e5185e64c40dbb5bc42d2292e5e6e3bd882fcb
-
SHA512
f207448de88ffb56e8a5199d7d7bc45f5ad59b3cb4a2d9b5ed2e9f18fda5d8c8e4d2e8d967563b64613c0ebf5cb1d7fda4fe92f2a42a4d282f127230c2ac34f2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d268009a721ac1263fd448040705eca6_JaffaCakes118
Files
-
d268009a721ac1263fd448040705eca6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 788KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_BOX_ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE