Static task
static1
Behavioral task
behavioral1
Sample
14f5dfa36542cdef3390728ea8c2f310_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14f5dfa36542cdef3390728ea8c2f310_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
14f5dfa36542cdef3390728ea8c2f310_JaffaCakes118
-
Size
312KB
-
MD5
14f5dfa36542cdef3390728ea8c2f310
-
SHA1
97b5edc68803b59648f722ed7f2898e2affd2b7c
-
SHA256
cdf67f0d9b249efa5f1cf17ea405fae64c940a8cfd84912a019db5b910587f43
-
SHA512
4f1c6b8fe6a0e0bfd5f8ef892a87d004483bcc60de6dfe9ae4def05e3e1d0684e659b844090a45ae88603d87b8a499cba22e3dc30c142b214298d01f47a33095
-
SSDEEP
6144:N3yS+ymVImrPgFRPMA38TSIcWitH6f2wKPeacnPvDsVyJ+5J7BV1xT9HBA35X:NCSOVIePZy8XutH6fDKPeH3YyETBV/8d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14f5dfa36542cdef3390728ea8c2f310_JaffaCakes118
Files
-
14f5dfa36542cdef3390728ea8c2f310_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.data Size: - Virtual size: 624KB
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ