Static task
static1
Behavioral task
behavioral1
Sample
d474de0c643f95b1c728c5c55b96c04d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d474de0c643f95b1c728c5c55b96c04d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d474de0c643f95b1c728c5c55b96c04d_JaffaCakes118
-
Size
82KB
-
MD5
d474de0c643f95b1c728c5c55b96c04d
-
SHA1
e82ff5296b2683e2280190ed455bfb98a1ef4ec3
-
SHA256
bcc00ff4cc4289ea6365a6e35ec2117f270c9670bd069e5e5d0e575a9f0ee08e
-
SHA512
7eb92b5fa7a76768144a318730cce3e3570ba43713fb5e62f6aa386c1de32060cfe3ce4906146cd4ec30a6b373680dac33ff866f4dc87c53e7abecc630cfd5b6
-
SSDEEP
1536:dnF9o1kc3V5VuflrHI7VPgpiuQi0QBckNJSJJmtOSV+8wArD8pX:61kc3bs0oirihBckNJTtOSU81rD8Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d474de0c643f95b1c728c5c55b96c04d_JaffaCakes118
Files
-
d474de0c643f95b1c728c5c55b96c04d_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 70KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE