Static task
static1
Behavioral task
behavioral1
Sample
0f34e9d7f48ce237f42fe527c4b5291f_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f34e9d7f48ce237f42fe527c4b5291f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0f34e9d7f48ce237f42fe527c4b5291f_JaffaCakes118
-
Size
162KB
-
MD5
0f34e9d7f48ce237f42fe527c4b5291f
-
SHA1
800808002a814e77bf5d30a62051a4c0d7b1fe34
-
SHA256
420c201e1aa9ca4daf4b4ccd41048c02a9037252a2381768c750b84565e6233c
-
SHA512
6a28812f12cbf3fcfdfaf09de4258a8139f07afe061edf32b2014bf11243f9ed11620abf47a86d8e2ae5d8c8a09c126e331f28f144ed30965261c4b695769fd3
-
SSDEEP
3072:cG6mTJdA4x0xtMzFpL8VWxN2dLQc/e+VYMiTQkQQa3DnpHvA026AeGYB:ccd6w/Edw+V2TQkQQa3DkFgB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f34e9d7f48ce237f42fe527c4b5291f_JaffaCakes118
Files
-
0f34e9d7f48ce237f42fe527c4b5291f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 109KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 116KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 113KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklav Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE