zyd16
Static task
static1
Behavioral task
behavioral1
Sample
d52269f6344be82cf0ac3c96144d8bf5_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d52269f6344be82cf0ac3c96144d8bf5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d52269f6344be82cf0ac3c96144d8bf5_JaffaCakes118
-
Size
29KB
-
MD5
d52269f6344be82cf0ac3c96144d8bf5
-
SHA1
29865b0c0e5cd6e77c98e93e25563ea3cf077a61
-
SHA256
65be87afa3e03e2e241539b937dac46d01084f53853dddd80ca38e6ada227cad
-
SHA512
84d7d000b4d5f58f0a7682f1caad27ff2bfdfd8b0ac32bc10346727998d670234da429f93df009890ae65e7e833ddda2d401c0709bc99cf2661c6ff9451cad96
-
SSDEEP
384:1yuzmk3ySFy81TvV5Olz9HkGlY8M8WbHSwywVgh877M6vpy3j1n1O1zQv1Cgu169:7M81TvV5EhkWYjbSwyw48YY9L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d52269f6344be82cf0ac3c96144d8bf5_JaffaCakes118
Files
-
d52269f6344be82cf0ac3c96144d8bf5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ