start
Static task
static1
Behavioral task
behavioral1
Sample
d465944e71583405b8a4f1b264164381.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d465944e71583405b8a4f1b264164381.dll
Resource
win10v2004-20240802-en
General
-
Target
10a7c7157c4c42a3bc3160c2d03bc86a_JaffaCakes118
-
Size
86KB
-
MD5
10a7c7157c4c42a3bc3160c2d03bc86a
-
SHA1
a9074afaf66caad5dc72c23b8a182b7c82cff146
-
SHA256
d3db6862cb86e881c6a8a19aa1529694fbb435cf78d8c0f52529d5e5946fbbb9
-
SHA512
be6bf61c2654372cd3851eee2c4a39b46490b5ec633d8b6ceef0a5f4ec7be2c10686e7ff6424dfd36a5b45cf86e35eb280b02c932cf460a4630156e28ff983fb
-
SSDEEP
1536:eRft9wNZI4+EugRDTK8cfIRn782TlwBoAhIOLNjbKvKW3UgZ4B5:EtUt+EpcgR78wlK1pjrgZQ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d465944e71583405b8a4f1b264164381.DLL
Files
-
10a7c7157c4c42a3bc3160c2d03bc86a_JaffaCakes118.rar
-
d465944e71583405b8a4f1b264164381.DLL.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 16KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE