Static task
static1
Behavioral task
behavioral1
Sample
136756b928465500c14eafbc1c112c5a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
136756b928465500c14eafbc1c112c5a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
136756b928465500c14eafbc1c112c5a_JaffaCakes118
-
Size
38KB
-
MD5
136756b928465500c14eafbc1c112c5a
-
SHA1
13f2a3aefcb82452a77f22e0e8c50342c24b8a8a
-
SHA256
75c91192ac4094c1739ed8b60d2dd8ab246888c3c2472666a7498a1e9c992c32
-
SHA512
c01e9d78383866401dbf6fff8a9aad1056b76dc328f22a66bb7832081760c820386a09595021598bc6061a4fcac636196a85c1cefe4416b89d040c92d96fe976
-
SSDEEP
768:UyWhHKyWz9WYeJK9poW5wq9aPN73gRnGmks5MqVg:UpV969WZJKQW5YPN73gAmks5FV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 136756b928465500c14eafbc1c112c5a_JaffaCakes118
Files
-
136756b928465500c14eafbc1c112c5a_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE