Static task
static1
Behavioral task
behavioral1
Sample
170529c0dc64e1b131701377b2b024b9_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
170529c0dc64e1b131701377b2b024b9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
170529c0dc64e1b131701377b2b024b9_JaffaCakes118
-
Size
85KB
-
MD5
170529c0dc64e1b131701377b2b024b9
-
SHA1
a2183e384b4b887336ab238fc775e57c13ecfe01
-
SHA256
913d64a38f452a3667d34ec7c2f9c1d44df558da142dbd211d321ce937d4260f
-
SHA512
1f039ea052d03115c51b40a643ec914e2a72d5ba9ffd1b4579241e7106a724b55aa51167bc776beb8bd52a23db5ace808501cfd5255c10f1cda1ccda3bbfc154
-
SSDEEP
1536:Sk93ucpvp2afMKF8Hu+mZnPPoKvPg439A5iG5qJCGnlfqZ+HJ9JP7wnfnQE6wWXQ:N9RpvpVz6DmZPoKvJ3SkGkJXlfqMHJfC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 170529c0dc64e1b131701377b2b024b9_JaffaCakes118
Files
-
170529c0dc64e1b131701377b2b024b9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE