Static task
static1
Behavioral task
behavioral1
Sample
29431144960db0840acb890c59a3266b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29431144960db0840acb890c59a3266b_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
29431144960db0840acb890c59a3266b_JaffaCakes118
-
Size
47KB
-
MD5
29431144960db0840acb890c59a3266b
-
SHA1
43217dff1e6ae06487a518bd1facf0b0877601fa
-
SHA256
ab216b0b9eb9d5b3edc8ff0978729f1e6ad7b029aaeb9191d477f9e8ce7fa77e
-
SHA512
ed9e4b2eb20efd152210f70d4d550b5287f3dc7b2577feca91d0a8eaa1127612f81ac293a33d612ce2f19c577bf4536e5cff38a67777349977f8a9eec4dbb924
-
SSDEEP
768:7wVdb+tU1pGFw0g8lCy3ZZvyB8CD8yD6yc7jhbf8xzehOlegl+HtpD9KYmbedg:Gdbywn8lCeZZKSyvDk7jBAaUeg4LRKYm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29431144960db0840acb890c59a3266b_JaffaCakes118
Files
-
29431144960db0840acb890c59a3266b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 18KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE