Static task
static1
Behavioral task
behavioral1
Sample
15f633649faf56869cea3b6e84738177_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15f633649faf56869cea3b6e84738177_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
15f633649faf56869cea3b6e84738177_JaffaCakes118
-
Size
76KB
-
MD5
15f633649faf56869cea3b6e84738177
-
SHA1
6a97018cb7790522d628a21afd6c005a31484048
-
SHA256
155d2bddbfed21bde3b66f5b6147f98616ede8fb11893a6a4f868add1c181f3d
-
SHA512
a2bca0f90767d04eaf39c589be53de511ba85d44a0550e29a58893961da67cea001686aed6f01a8e9709ed9ad0e91d8aff3b19d9a0d7982c86817db459a1f225
-
SSDEEP
48:6kOdTzl/cDV9+lFCyzbqM333AW0LLOLtfCcFA2AlweHpndZyxxiFoUf+7zboNqmB:E6VoFClcgXKLYcFpA/pnhX+boEaG03Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15f633649faf56869cea3b6e84738177_JaffaCakes118
Files
-
15f633649faf56869cea3b6e84738177_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ