Static task
static1
Behavioral task
behavioral1
Sample
dae38cacd34588f9a3e5454cbb9497a2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dae38cacd34588f9a3e5454cbb9497a2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dae38cacd34588f9a3e5454cbb9497a2_JaffaCakes118
-
Size
69KB
-
MD5
dae38cacd34588f9a3e5454cbb9497a2
-
SHA1
ee8aea9ec7400516f21a5cf4fbadb933f763b860
-
SHA256
6b274a27bd3622ed82dcb41fd2abc32087c27ff0eb91f91fc963fdaae7a5b191
-
SHA512
d9353585acc9082041848dd3c837f7ad6a5fcb7c01e1c065a4a9bf7834ac62fc5e4a171184ce04e7a419e6265b55e811345e07e09b28eda093a479b7343869f5
-
SSDEEP
1536:qvMrTCy6b4OKpz4Rlhwn7P0ccGgy6r+HnYVL0:ZOlEXMPhwj0cky6run40
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dae38cacd34588f9a3e5454cbb9497a2_JaffaCakes118
Files
-
dae38cacd34588f9a3e5454cbb9497a2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE