Static task
static1
Behavioral task
behavioral1
Sample
dc5265ccc243143ee8648d752701db7b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dc5265ccc243143ee8648d752701db7b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dc5265ccc243143ee8648d752701db7b_JaffaCakes118
-
Size
187KB
-
MD5
dc5265ccc243143ee8648d752701db7b
-
SHA1
637970ff3f023d6c21c5fa39fb70cc0ab17a9432
-
SHA256
410ffea113ed821d4757f583326c1c5836956c8d3ffe88e2373ef94d97c3599d
-
SHA512
f17d6756705c145e5926d96eccc58d45befe63a5957ff0b5f17078a4b183d4b19b212d19a9eda28b8de4db7d33f2a66ea345d5d09557b5ba4abbc0551b8e264e
-
SSDEEP
3072:cG6mTJdA4x0xtMzFpL8VWxN2dLQc/e+VYMiTQkQQa3DnpHvA026AeGYA8U40E8xI:ccd6w/Edw+V2TQkQQa3DkFg7KFK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc5265ccc243143ee8648d752701db7b_JaffaCakes118
Files
-
dc5265ccc243143ee8648d752701db7b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 109KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 116KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 113KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklav Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE