Static task
static1
Behavioral task
behavioral1
Sample
31d3b2e6a138948ba26c7714dbe8ca0e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31d3b2e6a138948ba26c7714dbe8ca0e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
31d3b2e6a138948ba26c7714dbe8ca0e_JaffaCakes118
-
Size
121KB
-
MD5
31d3b2e6a138948ba26c7714dbe8ca0e
-
SHA1
23864165553a2d81f9e29345adb8e6e10a3d1623
-
SHA256
4278ad1df907ec7cf8a1b3d8e1df44d883d970436bc4f702cca9aa308e9f2ad5
-
SHA512
8f881e63c4aad8f61faee841efd446449ea1d66e84f5d6e27ee3a8bf1c465b097095bae337cbf2a958629dc736129b093aa43767b3093943a869f2af740370a2
-
SSDEEP
1536:sC0eZ1t5HnwfdOFSEPHYvsQxjAJ6WxJJMz8sVmd2P27DrSlj/Frs3hcKLO2:s7zk4vbAfx3e/Fr/KLO2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31d3b2e6a138948ba26c7714dbe8ca0e_JaffaCakes118
Files
-
31d3b2e6a138948ba26c7714dbe8ca0e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ