Static task
static1
Behavioral task
behavioral1
Sample
31803ee7d89e32d9974b961807f9575e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31803ee7d89e32d9974b961807f9575e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
31803ee7d89e32d9974b961807f9575e_JaffaCakes118
-
Size
72KB
-
MD5
31803ee7d89e32d9974b961807f9575e
-
SHA1
c77facb12f046a571fba7fc9e0b65936c65435a8
-
SHA256
624907f58e7450d71ca57244aa1a2b3edb1bf4e4e6a01181e9f9c54cb156c48d
-
SHA512
49bf8ee41bb10817017d249afdfe3995c3f66516ca47107fa8646223ec92a4b476b9b4b7a3c670d54a8194c33aa5f8f87fffba6b1dcaaefea288f2f225b15902
-
SSDEEP
1536:HgshApj0X4Lm+0VgYI9Rl3sInloSRlx2FfIm+8X9R+OgMN/rsTAmvlIBdBnlX:AsRILm/gv9RrLx2FfI78X9RQMNz4Amvw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31803ee7d89e32d9974b961807f9575e_JaffaCakes118
Files
-
31803ee7d89e32d9974b961807f9575e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
cs9wfd5 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
p9r Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
whfhai Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE