Static task
static1
Behavioral task
behavioral1
Sample
d38dc170866d674e6d0211548f51d7ef_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
d38dc170866d674e6d0211548f51d7ef_JaffaCakes118
-
Size
135KB
-
MD5
d38dc170866d674e6d0211548f51d7ef
-
SHA1
23f1ca37316faf6c8f14e50b6f86cceaf1535e70
-
SHA256
e2a7627e22124e84d4e636754d8e4f44c38159b8cbee4600e17065be4314d32c
-
SHA512
02a1e574aed3645949f4aad5ee5da83ff3c7eb28101437621604e0c7eb9303b1ed4c87fb0077d4986602ed6767a30b055e751bc3a4b6441dd952e4784c4ae5e0
-
SSDEEP
3072:IEsgn5tHnEJuMDofUQcmTufLwNgqBqyLT:IEj+pWWE/qy3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d38dc170866d674e6d0211548f51d7ef_JaffaCakes118
Files
-
d38dc170866d674e6d0211548f51d7ef_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ