Static task
static1
Behavioral task
behavioral1
Sample
36a0213b51f3bb40eb11ab9ea93986af_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36a0213b51f3bb40eb11ab9ea93986af_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
36a0213b51f3bb40eb11ab9ea93986af_JaffaCakes118
-
Size
6KB
-
MD5
36a0213b51f3bb40eb11ab9ea93986af
-
SHA1
800f94e303ecdd8ecd25124d09f532f7298aa090
-
SHA256
8a5e3e2317e565aea209ed0c5eee062147d9f71817303fd22250e795b80de25b
-
SHA512
d53c61175149667a261d86d7e1f44200d31753288f9b6f32de8b373c343c00362c1b8bc66778d57efb83d3e4d07b9043017f6c70ae2de14f439af6e98fef640f
-
SSDEEP
96:kWq1BBV2U0AW5DlriyW4bn7iNbDDa7YouKweg0jrCuBqur/Q6EBAV2l5kgcwQwTq:epQCW5DsX4CpDW/g299AymkgUw9MT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36a0213b51f3bb40eb11ab9ea93986af_JaffaCakes118
Files
-
36a0213b51f3bb40eb11ab9ea93986af_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE