Static task
static1
Behavioral task
behavioral1
Sample
302db7e4421ed72d57d467b773a402da_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
302db7e4421ed72d57d467b773a402da_JaffaCakes118.dll
Resource
win10v2004-20240708-en
General
-
Target
302db7e4421ed72d57d467b773a402da_JaffaCakes118
-
Size
93KB
-
MD5
302db7e4421ed72d57d467b773a402da
-
SHA1
f071f34f26bb69379b56ad9019a2983f08aa6169
-
SHA256
246e9e9166316628c48f555d5cc0cf2537b1fbcdda342c2b788c8dbaa24aae2f
-
SHA512
7c8a247c48cbd3d2ed7b8eaeca89d5725ba55d0a1faca4bad54ee64bee670220923ba18d443aca02ad74a34875944cf416a637ed6cbb97ac6d7ee3b3cde17821
-
SSDEEP
1536:+tM4gcgCBI+KOocuI/G01EDxmssg4nEtuOhr/nZryjlKoYEWUYbKVYYbw:QM4YYxaqG01EeRnEZyjMKgT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 302db7e4421ed72d57d467b773a402da_JaffaCakes118
Files
-
302db7e4421ed72d57d467b773a402da_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rtfg Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rtfde Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wsed Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rfted Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fcvgb Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ