Static task
static1
Behavioral task
behavioral1
Sample
17212c23bf0cf3d537f572147bf8c641_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17212c23bf0cf3d537f572147bf8c641_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
17212c23bf0cf3d537f572147bf8c641_JaffaCakes118
-
Size
48KB
-
MD5
17212c23bf0cf3d537f572147bf8c641
-
SHA1
22956bb26597c318d808ba9b62282714735cf9a3
-
SHA256
bc9f8729d20276b2740392cd618e9241ab88228cc4e582f47b039553f80c33a0
-
SHA512
7929b2d90b62ebdd33c562906050b0eacb14dc158e869f8999999abec0570cbc0d6e826e9c6933494fe6e35470ba007917816101f2cf6dc9ba0e43180d21dbf8
-
SSDEEP
768:cAdov1hwJG8V2/ZNfLk2eJezoG6QWC1XIfu/Qvud4Snu4/dmdUO/s+qT69jh:vdIVZNfw2eJyoGZtFuGMp/s+qOh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17212c23bf0cf3d537f572147bf8c641_JaffaCakes118
Files
-
17212c23bf0cf3d537f572147bf8c641_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 36KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE