Static task
static1
Behavioral task
behavioral1
Sample
367bf2fd9fcebce66387a6d1caf8c71e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
367bf2fd9fcebce66387a6d1caf8c71e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
367bf2fd9fcebce66387a6d1caf8c71e_JaffaCakes118
-
Size
18KB
-
MD5
367bf2fd9fcebce66387a6d1caf8c71e
-
SHA1
2fb3f9b602d6a5ec05aee5f1ddf38febc03a1d82
-
SHA256
fd3f1985102674f8cdab63e769f6b9b049ea313ec5f4de68f9174fdca287f02f
-
SHA512
25f9e9ceb99552e2465c3ec3144af06aeb9d43bc74e422094ea2479940d41f0fb88dfa8e3549dad91ad2406d748914ab64b4c6a3b26d92b90cde56b929a0fa78
-
SSDEEP
192:SDS+1z5nEy8dZW15QdKu+o9HWQrQXnb0Ta9++VmNcimjFtqZ7AhxQVoXUbYbyPc+:MZEyYNJ7W9kcFjFMZ0bkoXoUw9V9N4W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 367bf2fd9fcebce66387a6d1caf8c71e_JaffaCakes118
Files
-
367bf2fd9fcebce66387a6d1caf8c71e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ