Static task
static1
Behavioral task
behavioral1
Sample
d33ec6b237f37099e43b1157e626bbdb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d33ec6b237f37099e43b1157e626bbdb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d33ec6b237f37099e43b1157e626bbdb_JaffaCakes118
-
Size
74KB
-
MD5
d33ec6b237f37099e43b1157e626bbdb
-
SHA1
c49dc219609df6fbe657ca87976c6ad3017f984d
-
SHA256
e608b18a8a35bce7bc3572483dcdeeee0cf7212ef34c984de0f29db81053af03
-
SHA512
974b7d91459c570fcc4e563879458de4512985da394c8076d47efffc61a5c65ff2d4452a52a0789e23e398b822df13a3f286439e20a2583dc176f4649bb8886d
-
SSDEEP
1536:pbYyhqiOBV/u6B5G0wpP9u3ai4qODHKIp7:xVhq9BV/JYtPgU7p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d33ec6b237f37099e43b1157e626bbdb_JaffaCakes118
Files
-
d33ec6b237f37099e43b1157e626bbdb_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
syssso Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE