Static task
static1
Behavioral task
behavioral1
Sample
15e73456e34da7391305be85e40aff55_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15e73456e34da7391305be85e40aff55_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
15e73456e34da7391305be85e40aff55_JaffaCakes118
-
Size
235KB
-
MD5
15e73456e34da7391305be85e40aff55
-
SHA1
87ca53cbf85e2df830052a36377e103abea08679
-
SHA256
b501933299077cf2202a07f0222507da5b0180df8a421ee1b7c09938c16af157
-
SHA512
9fdde0d9d71f8e3c1ef73dd2e91956b1bf72476f829e2dc341281da080d36ddd884aeb767b692d6723c113bc24b1560abab04fd13c222206e00f26dd3bca5456
-
SSDEEP
3072:cnXBQMcNd5fpFj9RSJg7exkTIYwaDzc+Sg3BZ+ppkhqe2alYVmI2pRyWHSOIx2:qXu55fnSjxkEvahSgxZ+koeTy6R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15e73456e34da7391305be85e40aff55_JaffaCakes118
Files
-
15e73456e34da7391305be85e40aff55_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 104KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 116KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 113KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklav Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE