Static task
static1
Behavioral task
behavioral1
Sample
f67432456e2825a98f12106890777fd7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f67432456e2825a98f12106890777fd7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
f67432456e2825a98f12106890777fd7_JaffaCakes118
-
Size
196KB
-
MD5
f67432456e2825a98f12106890777fd7
-
SHA1
80ab39c8594bf523c6d6aea555d0f3679d59b7db
-
SHA256
f06876654296ca039a3f7ca2b6e90121d631da5b3511ccab6422f8b69d527556
-
SHA512
a4611029232b7391b1af6a3f3fefb86ecbbff98030e669ee97a0c37f0b80d48c5d225394cbf457719fabcc0afd3f557b74b3684ebd9f0b3139c8b0d2f0095901
-
SSDEEP
3072:ceBt0cbAUXuj1VAw8LztG+4LgE1iARmGPB/X7d9+TyY4pnWk4kRAclDwRNG95ZI2:tbhbAQF3tG1MGPBHY4RD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f67432456e2825a98f12106890777fd7_JaffaCakes118
Files
-
f67432456e2825a98f12106890777fd7_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 184KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ