Static task
static1
Behavioral task
behavioral1
Sample
dd8d3718197a10097cd72a94ed223238_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd8d3718197a10097cd72a94ed223238_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dd8d3718197a10097cd72a94ed223238_JaffaCakes118
-
Size
261KB
-
MD5
dd8d3718197a10097cd72a94ed223238
-
SHA1
fa084c173be4f5ead4cd1d7843fc14f69e6de428
-
SHA256
dfcdcabd576d8717dcc570a2820947e385f0e10bdb2d9a332e7a5823ea51b3ac
-
SHA512
f6040d37868695645040037a3a9e8c0522fdb063bd0a9b13fc371260d43cdb3b6dc99068de843947c7a1337ffa4c6b3af4c07687d57b6d9fd4a03b985082ad17
-
SSDEEP
6144:eQiwXrhGfEsCdfEhkVgMqcT8xonkmHhbbdu1T:DX7heCdfEhkVgvclkmHhbbdu1T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd8d3718197a10097cd72a94ed223238_JaffaCakes118
Files
-
dd8d3718197a10097cd72a94ed223238_JaffaCakes118.dll windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.xdata Size: 928B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 384B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ