run
Static task
static1
Behavioral task
behavioral1
Sample
fec67b604d8742c5c68cd2b2a2e8a537_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fec67b604d8742c5c68cd2b2a2e8a537_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fec67b604d8742c5c68cd2b2a2e8a537_JaffaCakes118
-
Size
114KB
-
MD5
fec67b604d8742c5c68cd2b2a2e8a537
-
SHA1
147153e1984cec65a7b2110dee63c6bfea40e478
-
SHA256
3ea03ca16763146ce8f310b8a63c5e7d549c9677794e556b4d736e6e1e240348
-
SHA512
0a42edb8e1dfcd92ff84a9893c4dad48bfff55b467dc5a1f00959b60eb427669a8a36e627baf1a85358962c9a03c91a5d248a8463ae62f990ffa65ddd0b2e379
-
SSDEEP
3072:DYiMWhEoXwflfK6X3ZS9LfL15vlF5jfvwLw/NySI:DYLoX2lZX3+jzJly
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fec67b604d8742c5c68cd2b2a2e8a537_JaffaCakes118
Files
-
fec67b604d8742c5c68cd2b2a2e8a537_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 65B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ