Static task
static1
Behavioral task
behavioral1
Sample
dd5221e081acff91ee1df7e6b58cc796_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd5221e081acff91ee1df7e6b58cc796_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dd5221e081acff91ee1df7e6b58cc796_JaffaCakes118
-
Size
35KB
-
MD5
dd5221e081acff91ee1df7e6b58cc796
-
SHA1
d8d9a3b9a2ea49bb1acc9f2e726989d78d612c93
-
SHA256
d9f00fff8dbf5f648fed4ff9294d5a65b712f149213c22440504ac73d0e9c550
-
SHA512
20ebbbc6f8da45e3d5b6bade9dd1a3b800008c528b4121beb7d02e337a7e7bd45f74cc82ca0ba9c331d9e2554c14189cdfaee2038afa88b222d66d4161b1f63d
-
SSDEEP
768:sX3BQoiltyIAefMPY11NWE8/QBTyWR0OPvVnBbt:sX3BQo+VfMw11Nx8/QBdCYv7p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd5221e081acff91ee1df7e6b58cc796_JaffaCakes118
Files
-
dd5221e081acff91ee1df7e6b58cc796_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 22KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE