Static task
static1
Behavioral task
behavioral1
Sample
feda826d536e26bdeb45a4ec37edd30f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
feda826d536e26bdeb45a4ec37edd30f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
feda826d536e26bdeb45a4ec37edd30f_JaffaCakes118
-
Size
11KB
-
MD5
feda826d536e26bdeb45a4ec37edd30f
-
SHA1
0f023f01e0789cb5a8e096a46232d48c758da441
-
SHA256
843c14c2b9bd3318dd2ee29f530a86b6731ff9c311daf2d349f994807450a3b5
-
SHA512
210f715383944f3065d433c96c8ea039dc82932b6342835b6bcc042911e8847f0278d47366dbabe33a632ef1d8fa51dceae31a6873f21ddd715e8457b5e7909c
-
SSDEEP
192:28FbIIb3F49U4Yi/0wotXH8XG9O83h8iHMGxSX:bp3ekXQXG9H2OzYX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feda826d536e26bdeb45a4ec37edd30f_JaffaCakes118
Files
-
feda826d536e26bdeb45a4ec37edd30f_JaffaCakes118.dll windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ