Static task
static1
Behavioral task
behavioral1
Sample
33783980f52239f4c00c45045f313cf4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33783980f52239f4c00c45045f313cf4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
33783980f52239f4c00c45045f313cf4_JaffaCakes118
-
Size
91KB
-
MD5
33783980f52239f4c00c45045f313cf4
-
SHA1
4e2c2db6b3880dedff92408d9755abfeb4cdfc8c
-
SHA256
c9e275ddba64fe03ada1330e2d2a75d24430e4a34f1b3403225ea8bacb3e6a4f
-
SHA512
685504adcf7667cfc8c1927a4acceed7313d463a0cfe4737a997d8b2e44d8d13c0f0a955a94aa00c5226155e97a311df781d274002fc9225218c6f1fb463f0eb
-
SSDEEP
1536:MOSUVYzUosKvxvDu1gF6MyCG/JBiJpltOD4RSnWi4JrR5GuO+pt3MJGDANzFRFJR:MOPYzUoBvxva1sBMaYD4RsWi4VRYuRpa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33783980f52239f4c00c45045f313cf4_JaffaCakes118
Files
-
33783980f52239f4c00c45045f313cf4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 188KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hhgdlsyf Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sziqipwj Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sziqipwj Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE