Static task
static1
Behavioral task
behavioral1
Sample
d359615b66ac51bc9eb8c87c6f1efe39_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d359615b66ac51bc9eb8c87c6f1efe39_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d359615b66ac51bc9eb8c87c6f1efe39_JaffaCakes118
-
Size
97KB
-
MD5
d359615b66ac51bc9eb8c87c6f1efe39
-
SHA1
0a308df090bb5b51910a4fb9820a7857c28396b5
-
SHA256
56aaaad3460202af1bf611b8efe0eba2445bd7b5a94da66e920ef92cb3e2cd88
-
SHA512
8ffd4217f735b2e856edbfcb9aefe65c97aaf718ec84896767882aee471d7c9eae4a00187e6e7fb6fedc2ee34c369b7deb21951a274a6cac7dde90a1a5464dab
-
SSDEEP
1536:xjyPpgFBI1Wn29o9FT+f+sBMMpSNR4nnq4+LHKVs5eedRh:pyhgFQmsgFHKVsbZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d359615b66ac51bc9eb8c87c6f1efe39_JaffaCakes118
Files
-
d359615b66ac51bc9eb8c87c6f1efe39_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ