Static task
static1
Behavioral task
behavioral1
Sample
dd4679d10762f549dcbbba300cfcc186_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd4679d10762f549dcbbba300cfcc186_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dd4679d10762f549dcbbba300cfcc186_JaffaCakes118
-
Size
50KB
-
MD5
dd4679d10762f549dcbbba300cfcc186
-
SHA1
d849217cbc6981762faeb83ce24cdc7ae1721a1f
-
SHA256
b1cd942b794029f78ff652e45d130f0c4bd2ae3e993ae9ec4b52160563165393
-
SHA512
72a95444467c3588ca5518e5810908d526f27b31b91eab7292f2e794ce9d51abde60615bf2cd045d5cfb0208cc25b7e73e321c15133c7eeb303d75d8a6c8ef4f
-
SSDEEP
768:7MeWFxGOk+EjzeQ3veCNljWxaSv12KhT0SFmDFjrHSl14N:7MeWFxGOk+czXeys14F3yl1u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd4679d10762f549dcbbba300cfcc186_JaffaCakes118
Files
-
dd4679d10762f549dcbbba300cfcc186_JaffaCakes118.dll .js windows:4 windows x86 arch:x86 polyglot
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ