Static task
static1
Behavioral task
behavioral1
Sample
059a66a569bc5f7446b625c4226d51ea_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
059a66a569bc5f7446b625c4226d51ea_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
059a66a569bc5f7446b625c4226d51ea_JaffaCakes118
-
Size
12KB
-
MD5
059a66a569bc5f7446b625c4226d51ea
-
SHA1
d075b5d518fd29f73a20367ef63373690942c4dd
-
SHA256
e019ffd817a07d83321e2e185c7c030fbe1d98a212d0f81e45b54b7ad314ff12
-
SHA512
1d1be9cca906c190e8fa70f9087d7f60c4e68ede7935c6d4d1ce27c0f8887be3df3ed8d4e70580510bcb45baeb34c8205fbe139320c3604313891d910086eccd
-
SSDEEP
192:zACd3GFZiVgsZ17/ljsysm5GstDLTNcGu3ttD7sbhpIRKlXvK8sg:D5YI7/x4m5Gwc/t8bFA8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 059a66a569bc5f7446b625c4226d51ea_JaffaCakes118
Files
-
059a66a569bc5f7446b625c4226d51ea_JaffaCakes118.dll windows:4 windows x86 arch:x86
bd8a597ba6fb788a05c03397e30c57b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualAlloc
VirtualProtect
CreateIoCompletionPort
Sections
.text Size: 1024B - Virtual size: 686B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ