Static task
static1
Behavioral task
behavioral1
Sample
31f2c8f82ee20748ce12f58067210f98_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31f2c8f82ee20748ce12f58067210f98_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
31f2c8f82ee20748ce12f58067210f98_JaffaCakes118
-
Size
15KB
-
MD5
31f2c8f82ee20748ce12f58067210f98
-
SHA1
ac21ea70f163fb56c94b8c285fb63cc6f74d0979
-
SHA256
198523aacb1ffe37737ba8270853d002bcf4059c08645f414911e3b653bf5276
-
SHA512
c387260de6083e6b2a5b1e8f96d88b572e0999593f39aa0f6aaefd2427cfdb221845039b88296ddb422c4d4df5e2de05d3d90af84f3a7d8027e76ca6e505fcf9
-
SSDEEP
384:RE3Xbs6Cm4FRkTkYDKf6QBOg5jajrU1G8X:RE3Ls6CcLDa6QQg5jajrU1R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31f2c8f82ee20748ce12f58067210f98_JaffaCakes118
Files
-
31f2c8f82ee20748ce12f58067210f98_JaffaCakes118.dll windows:4 windows x86 arch:x86
515b9324a9ead7c363b5637881e8c8c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
sprintf
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ