Static task
static1
Behavioral task
behavioral1
Sample
def6104b9ea21b55c5e453cd36f7a98d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
def6104b9ea21b55c5e453cd36f7a98d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
def6104b9ea21b55c5e453cd36f7a98d_JaffaCakes118
-
Size
24KB
-
MD5
def6104b9ea21b55c5e453cd36f7a98d
-
SHA1
232bbc1e32c65b25227d25233bb389d354567b3d
-
SHA256
1b259abd35b0c8a65b21a76b85990e1f799ae52c03d9d49c72255c7d9db8a115
-
SHA512
8463125af0912b6757ca5824f1bd73625695cdac16013c5a0d7ad772955e9d898364f356b4315900689eb0f7479bf10c1e243af1e6d58a9242b40904e261d22e
-
SSDEEP
384:rQFPmBmnxxPXzXzXVYkUT44fqL0l91SPTzK:tBmnxxPXzXzXqZ44yLY/m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource def6104b9ea21b55c5e453cd36f7a98d_JaffaCakes118
Files
-
def6104b9ea21b55c5e453cd36f7a98d_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ