rbadmm
Static task
static1
Behavioral task
behavioral1
Sample
d61cdfc3d8498f40ec41398a38ca1ac1_JaffaCakes118.dll
Resource
win11-20240802-en
General
-
Target
d61cdfc3d8498f40ec41398a38ca1ac1_JaffaCakes118
-
Size
43KB
-
MD5
d61cdfc3d8498f40ec41398a38ca1ac1
-
SHA1
f00dda3da918ed8a700ab666e35d63b25afdb529
-
SHA256
8e048aa41cf6a60f00417a7a7fe9d2c95b1b2b64babf7ba781ab59ebd134f339
-
SHA512
0f383ac0a92a9da6caf0e95d9bde7649422bf700c1113c3d17bae564ee085359171b444bbce2123da79f871757f5bb0ed1fe3d019b3df014ced4bb121d1b7948
-
SSDEEP
768:W2gKfufDjRZK6olxvNKdH0xs2Q6MSsARplzF5+RmhSduU:xgKfu/RZiTs96MSsAVzP+Rm+u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d61cdfc3d8498f40ec41398a38ca1ac1_JaffaCakes118
Files
-
d61cdfc3d8498f40ec41398a38ca1ac1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ