Static task
static1
Behavioral task
behavioral1
Sample
3e321ca343087449c24ab4303fd28dc6_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3e321ca343087449c24ab4303fd28dc6_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
3e321ca343087449c24ab4303fd28dc6_JaffaCakes118
-
Size
4KB
-
MD5
3e321ca343087449c24ab4303fd28dc6
-
SHA1
e665f33f3a03637cec2c1607c843539d40d25f96
-
SHA256
bbd74e02d335647d7075f40b341f2ce8951ef472184b3b1d17537cdb06b729a5
-
SHA512
d1ba1fe28febb65690d7756f47d3d7ae24f97b7571f95a8d946901ced8a077da3a869910c3e95c56cb1b3c33bf94b7f1a178fe423f2e3cc55a3fc3f778069572
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e321ca343087449c24ab4303fd28dc6_JaffaCakes118
Files
-
3e321ca343087449c24ab4303fd28dc6_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 555KB - Virtual size: 554KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ