Static task
static1
Behavioral task
behavioral1
Sample
0edd2167d9928c0f7133c36c61ea8b55_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0edd2167d9928c0f7133c36c61ea8b55_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0edd2167d9928c0f7133c36c61ea8b55_JaffaCakes118
-
Size
15KB
-
MD5
0edd2167d9928c0f7133c36c61ea8b55
-
SHA1
d92b2e64849c9da1553971c1de778a7fa67ec7ba
-
SHA256
150a6d4feaddfc672882a3415e17a40eddac2c7e4715f38f55af99d31450a49a
-
SHA512
7ea26015bf37803d07713ad779cefa1cd45796bb0ddb7e78e93a082b9ddd0bf69c05379478cb2d84db01415afc34388cfefeee3bc99b090fbc7cba2c56459e7a
-
SSDEEP
384:K1guCTYH15Zd5Y1RfipH+TikHaWd/QPnB+MBxh7:cgBYH1121RK2ip4/QvB+Mp7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0edd2167d9928c0f7133c36c61ea8b55_JaffaCakes118
Files
-
0edd2167d9928c0f7133c36c61ea8b55_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ