Static task
static1
Behavioral task
behavioral1
Sample
0b0b01cd6422dc8c08e3a86c20f83238_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b0b01cd6422dc8c08e3a86c20f83238_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0b0b01cd6422dc8c08e3a86c20f83238_JaffaCakes118
-
Size
92KB
-
MD5
0b0b01cd6422dc8c08e3a86c20f83238
-
SHA1
168a6562c6fa22e3bcfb5fbfc4ecc431afc561b4
-
SHA256
5f4346f63e8fe3d5f74dbe4942b9dc43304a0386b10a806e3fa1f5aafbbb1d1a
-
SHA512
806a4168c25e4cb527b860c82cca7fe0901d06a8357abc07b1535190e6dc814c4cdeafc6718320bebf61fc10eccdf9d7ed4a568220ca3531f0a0ee310371e93b
-
SSDEEP
1536:B0PwBdoLUboajfPFBjtK2Leiy6U9mJuAK09il+cWJqPAC5ezElN9+jvqNYpRmLpm:SO9boYfP3XLeiy6UYgM++rtCMG+j4YHh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b0b01cd6422dc8c08e3a86c20f83238_JaffaCakes118
Files
-
0b0b01cd6422dc8c08e3a86c20f83238_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.petite Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE