Static task
static1
Behavioral task
behavioral1
Sample
325210afebd12b7b194a9cb4b571f67f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
325210afebd12b7b194a9cb4b571f67f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
325210afebd12b7b194a9cb4b571f67f_JaffaCakes118
-
Size
104KB
-
MD5
325210afebd12b7b194a9cb4b571f67f
-
SHA1
45ae563e68fd19072151da833abf0bab7118069e
-
SHA256
a03cc3b0fc421d64561491a3b5df80041824c07504b59de29ae9aee85c865f7d
-
SHA512
3a5b1be3086e55fd7ec907eaeaad97dc8d97e0e8fd237a7101ed04c27e3aa736e5abf6598ee1342622f1d2e03fa2f79d9baf30415adb9d3a1519fd4f92ea28bd
-
SSDEEP
1536:N/bIB9N3c8FrlR8FaG8SmGVA/EtFp968+eiOY658GG:NzwxR8FaG8vGVukFp9SH65dG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 325210afebd12b7b194a9cb4b571f67f_JaffaCakes118
Files
-
325210afebd12b7b194a9cb4b571f67f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
b Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hdw Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE