Static task
static1
Behavioral task
behavioral1
Sample
dcbdfbc83e6135c173681ae9837ec9d0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcbdfbc83e6135c173681ae9837ec9d0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dcbdfbc83e6135c173681ae9837ec9d0_JaffaCakes118
-
Size
84KB
-
MD5
dcbdfbc83e6135c173681ae9837ec9d0
-
SHA1
9f920a90e8ea29e2e61620cc0472b0faaf6f1f6f
-
SHA256
b40491ac39be5e5ce91458ec622dfacfd576c9db622f270225d1febf979e5cd8
-
SHA512
a4aaaa597574f7b7a7ae25f09ecc2306512ebf26b1ff4a76bbc4f3e8caf08df64557edad5e5bfa5f1c685b939c1768f1b05a8f183adabebcecb3b5c28a577394
-
SSDEEP
1536:9xa2BeFmESqbek5J0+xGKTPXfshwPZcQ7j4G2vaqPHp:9xaIeF5SWeOTPUicQY9NJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcbdfbc83e6135c173681ae9837ec9d0_JaffaCakes118
Files
-
dcbdfbc83e6135c173681ae9837ec9d0_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
tfdessd Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mgxedua Size: - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ