Static task
static1
Behavioral task
behavioral1
Sample
dd608d269d2c67ac4ad4fb0ca369765c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd608d269d2c67ac4ad4fb0ca369765c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dd608d269d2c67ac4ad4fb0ca369765c_JaffaCakes118
-
Size
37KB
-
MD5
dd608d269d2c67ac4ad4fb0ca369765c
-
SHA1
6e6a6e10cc70872211b8e65ab6774425889353e8
-
SHA256
57b11bfe4ec088ad4299cfc0fa3e32effe1c479a87b5e5a8851ffbd3f47391da
-
SHA512
65e9022862ba195efe3e6341da6531e6964ba629c0f0747ed8e9a4cf26e5bf95cc928a0355f35069be9d184d281d74bebc64dc54157da5d28889a78f114462d5
-
SSDEEP
768:loxpnuQgH1xC9JS3x1ixNFsw3oe0mrJzrjUEb1JcKm:lG9uQgHyw3ixNew37rJzUEbAK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd608d269d2c67ac4ad4fb0ca369765c_JaffaCakes118
Files
-
dd608d269d2c67ac4ad4fb0ca369765c_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 24KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE