Static task
static1
Behavioral task
behavioral1
Sample
243141ae5795f839fb2e90336a7fca35_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
243141ae5795f839fb2e90336a7fca35_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
243141ae5795f839fb2e90336a7fca35_JaffaCakes118
-
Size
521KB
-
MD5
243141ae5795f839fb2e90336a7fca35
-
SHA1
9a365d8c35cb06ba9e0fa2332b74014355ac24fb
-
SHA256
2ee323f6e59afd4d4c9db688b1ab4926dea923f3ffcd9c357a298391ac1ef871
-
SHA512
87da086770d74853df8868c55e21bba5c511a1251bdc1f6d5d514350e3656099c728d619d057a0616502eb5ed7955c94d0cc8c6541adc5f80c16c69430c5697e
-
SSDEEP
384:jQNjtU2ek27dOJkY2OpOSwkgE+dQMFTYugULRMVQztbWHhklI8qEEEEEEEEEEEE2:jQr24Oyw3yMFTtxLNtb2hkr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 243141ae5795f839fb2e90336a7fca35_JaffaCakes118
Files
-
243141ae5795f839fb2e90336a7fca35_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ