Static task
static1
Behavioral task
behavioral1
Sample
0907a49c8098872bc34d5d37cb946fd8_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0907a49c8098872bc34d5d37cb946fd8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0907a49c8098872bc34d5d37cb946fd8_JaffaCakes118
-
Size
88KB
-
MD5
0907a49c8098872bc34d5d37cb946fd8
-
SHA1
ed126458267324b9adbc61b1f796f10a88b6078f
-
SHA256
2e171867f731485dada2a0c74006b9e9e6e7c6b2a25069415aef67e5a03a11ee
-
SHA512
3244a2e363757c7d68a457e289ebc0475be9e6c6cc7f62da46ea2baef45c8458de02ba4739eb92c52c4e06810d974276724b4a660d360170dc55145ddef8b141
-
SSDEEP
1536:F6666666pc84sWjcdU8wkpcexm1ISPiWj6IoUNUwipO:gnU8wW2v6RUNEp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0907a49c8098872bc34d5d37cb946fd8_JaffaCakes118
Files
-
0907a49c8098872bc34d5d37cb946fd8_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ