Static task
static1
Behavioral task
behavioral1
Sample
0217814e2a390439aa7939ba4524e3bc_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0217814e2a390439aa7939ba4524e3bc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0217814e2a390439aa7939ba4524e3bc_JaffaCakes118
-
Size
1KB
-
MD5
0217814e2a390439aa7939ba4524e3bc
-
SHA1
31e48db403b5941c35f17db25407b9d344a8fb45
-
SHA256
c6f3e088fba4cbb219b1752e92835f9ead35835fef60193da2b897bcec0e7b03
-
SHA512
3a142265797a0483fd67f64afbb87d3e4a972e60b6115ff7bb174bfe40ff8e678a77fc85e7384e7e6fec6606a7671b6bac5cb3fd0685926a2743b8810b270855
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0217814e2a390439aa7939ba4524e3bc_JaffaCakes118
Files
-
0217814e2a390439aa7939ba4524e3bc_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 5B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 8B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 224B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ