Static task
static1
Behavioral task
behavioral1
Sample
dea37303a8ac58c5ed9c9a345dde3b57_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dea37303a8ac58c5ed9c9a345dde3b57_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dea37303a8ac58c5ed9c9a345dde3b57_JaffaCakes118
-
Size
192KB
-
MD5
dea37303a8ac58c5ed9c9a345dde3b57
-
SHA1
47975f40277d224d6a8ab6fe8e255fe8f180aadd
-
SHA256
f32bedee9e92deb3abdfea1864dc638fea67809c284a77cc416f55cc45c527c6
-
SHA512
704fd94a1b16b7e98dbb68f14c6e4759feed9acad87478545e3efe50725fb6d015137c13d40494f3a98f08797bc75535bde0c4f2dd1b30bf87d873b4db57183b
-
SSDEEP
3072:vonybLlRVqZQhlONuEIA0IaRuM5lUvxxxxOxXLbI58HKrLWTrVE4giSH3bbpFUdP:vRLlRVqZQhsNBIzDU8HKrLWTrVE4giq0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dea37303a8ac58c5ed9c9a345dde3b57_JaffaCakes118
Files
-
dea37303a8ac58c5ed9c9a345dde3b57_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ