Static task
static1
Behavioral task
behavioral1
Sample
d4be98d78b9b9c555ef5b69fc8b5ad24_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4be98d78b9b9c555ef5b69fc8b5ad24_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d4be98d78b9b9c555ef5b69fc8b5ad24_JaffaCakes118
-
Size
27KB
-
MD5
d4be98d78b9b9c555ef5b69fc8b5ad24
-
SHA1
107fd66cf88e42366781620fde21ec0dc5cee4c7
-
SHA256
975d6a7ebc1c13637d39a22589eacb811cb479fe93ec1814c29bc3f3488fc2bd
-
SHA512
747e627d51bbdcab8866bafd57cbeb583728b00172d3b300a1c6cf1b6b9f183f00485a76af12b9d295cda0d8677c107865890d7174e915152edcbc1b302290e4
-
SSDEEP
384:KIZCm19EUf3JzzHy4xTAtUVqP2Oo8Vwzx+eZV2:KIZL19EY3JlxTh6WzEJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4be98d78b9b9c555ef5b69fc8b5ad24_JaffaCakes118
Files
-
d4be98d78b9b9c555ef5b69fc8b5ad24_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 538B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ