Static task
static1
Behavioral task
behavioral1
Sample
369202661448ab848fd1e51580c6e307_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
369202661448ab848fd1e51580c6e307_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
369202661448ab848fd1e51580c6e307_JaffaCakes118
-
Size
60KB
-
MD5
369202661448ab848fd1e51580c6e307
-
SHA1
036971f6dfddb1066d538dcee7a2143372865782
-
SHA256
488e70ff8e2fc2a5167258c947481dd7773d213c25cbec3d204959350e40ceae
-
SHA512
4de774618f86732b1615208c62349e88ac2f38e8e27187a91c2b2e45a7b40dfe94f29dc0a92c9fd8cde10fc15d7e08ec67b7daa4e04c318eb400502217d6cd88
-
SSDEEP
1536:c2IYYJ9h6C4dxsZfXgF/9F6NRxSejLW0bHYDGcjN7M:c2IPrh6TaXC/MRxBjC6/6hM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 369202661448ab848fd1e51580c6e307_JaffaCakes118
Files
-
369202661448ab848fd1e51580c6e307_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 69KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE