Static task
static1
Behavioral task
behavioral1
Sample
db75f294610561fb057fcfed880d9016_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db75f294610561fb057fcfed880d9016_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
db75f294610561fb057fcfed880d9016_JaffaCakes118
-
Size
48KB
-
MD5
db75f294610561fb057fcfed880d9016
-
SHA1
0db9f2d2db93480943b02d9e7849731185e5af65
-
SHA256
897be0d880e467026d4bd83e01350435f0053ca347459329e415c72fcdaf96ff
-
SHA512
4670a8318ad45599640e27bc34d04fecf988cac03bc39a6a945b2597f71467eee71d2e5b353f5af978d2a2dfebcd1ad3f3efc4db0cb8e688ceaed3f97b3795d5
-
SSDEEP
768:oMkvwj7fTLy/ebJD614ZHS81E/pZ8b3fY3JITLSO5OyPMN7P3:oZX/e1DdERZ8bvYaTL95OyPMN7/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db75f294610561fb057fcfed880d9016_JaffaCakes118
Files
-
db75f294610561fb057fcfed880d9016_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ