Static task
static1
Behavioral task
behavioral1
Sample
32e0dff8b289f4601f8e49c4ebb00f20_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
32e0dff8b289f4601f8e49c4ebb00f20_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
32e0dff8b289f4601f8e49c4ebb00f20_JaffaCakes118
-
Size
552KB
-
MD5
32e0dff8b289f4601f8e49c4ebb00f20
-
SHA1
14bca4a820a633b2efb757fef170047c5c015b34
-
SHA256
c9710ff131f53699ce6b39e0eb3423edbea4f94fb919929a0ac323a14960292f
-
SHA512
45fbc36ef4632e2cc8a44bec6eac748517b1c9b54fc1d4b6c86af00cb697368f663bd0adbfb28a31d5c97c50163361caa8a90c4e905c44dcb772b737eb8d614d
-
SSDEEP
3072:6VtglEm9ZCf+snBrvH0l0kDRLGCpWBtjQDwLuTlmcSbHmPCF/FDcXybg2:yglVS2sxH0l04GZGEklmcOGPCF/FEEJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32e0dff8b289f4601f8e49c4ebb00f20_JaffaCakes118
Files
-
32e0dff8b289f4601f8e49c4ebb00f20_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ