Static task
static1
Behavioral task
behavioral1
Sample
3228f3484f83ba292ad27357dc821e18_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3228f3484f83ba292ad27357dc821e18_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3228f3484f83ba292ad27357dc821e18_JaffaCakes118
-
Size
11KB
-
MD5
3228f3484f83ba292ad27357dc821e18
-
SHA1
85b0a9f29aa6484215e5ab8ac61c886a5d80fb0f
-
SHA256
490242dba5bc7aa72f626dc0cea5eef38861807d666f506cfc9995971f652f21
-
SHA512
c2b3810c00eb784df0fa5aa03bb1b41862609e447c7a4088acfa4d7d1ccc2a72879be79bfaa51a4de504e053cb002bc27952d341b01232378c399986b694cc05
-
SSDEEP
192:WfkVNmZO4HaWK+Sdrfs5Dvn8EOXRskS/BeF03y8bFJ2EgC6Sg6+R0kw57:iVHaWp4m7BOXukS/G8DLiSg6+R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3228f3484f83ba292ad27357dc821e18_JaffaCakes118
Files
-
3228f3484f83ba292ad27357dc821e18_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 10KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 14B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ