Static task
static1
Behavioral task
behavioral1
Sample
d9c74d83e6d100bf3724ebaa538c490c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9c74d83e6d100bf3724ebaa538c490c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d9c74d83e6d100bf3724ebaa538c490c_JaffaCakes118
-
Size
20KB
-
MD5
d9c74d83e6d100bf3724ebaa538c490c
-
SHA1
9c425c03bfb3bdd2960ac055a1f52c95fdbfd479
-
SHA256
2dba4c59444b3774956cfb6d1df9bf555570c54b51076424ee87be5fbd5fc671
-
SHA512
00af7b0b6188a47a233d1da834eae6410008257fc15390e88a2a6baa8a92ade83709cf34448d0cc09d3e69037a466f94fa283b88e0d5d3daa0d09dbcf821b5e6
-
SSDEEP
384:D9VYTlTlanlvtzAAxP4QRDUbgD9tosfTNZSATDo+ZoxEjfrSGLZF:D3I8ToQRDU8pms57TU+ZRjjN7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9c74d83e6d100bf3724ebaa538c490c_JaffaCakes118
Files
-
d9c74d83e6d100bf3724ebaa538c490c_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 125KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE