Static task
static1
Behavioral task
behavioral1
Sample
0d646bd5713e26f5cc9f33c1bea50233_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d646bd5713e26f5cc9f33c1bea50233_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0d646bd5713e26f5cc9f33c1bea50233_JaffaCakes118
-
Size
47KB
-
MD5
0d646bd5713e26f5cc9f33c1bea50233
-
SHA1
361143eca9e50fbbcd9064d478c98b97a330e166
-
SHA256
09f4c091b0926a08c808c502a09997b92b6e7994319e002c59e40ec622d2d814
-
SHA512
32cb5181c2adeab8f1cb42c0b665e9a23776d3ae6834e519998c3fb977d12e2584a2a165de685b0d569f6265d719322d4a85fb7680ffd1d4523acadf9140c9af
-
SSDEEP
384:q0jrlYVftu4f3NM+D9x7WCQjiEjGOhTFQCCYxegioBkxAs3vXlWD3h3QTOwBa9Fe:qhVflM+v6WETTy7giekxAs6HvX+Kb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d646bd5713e26f5cc9f33c1bea50233_JaffaCakes118
Files
-
0d646bd5713e26f5cc9f33c1bea50233_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ