Static task
static1
Behavioral task
behavioral1
Sample
343b28634fe7738568f0028a0c86c6ff_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
343b28634fe7738568f0028a0c86c6ff_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
343b28634fe7738568f0028a0c86c6ff_JaffaCakes118
-
Size
5KB
-
MD5
343b28634fe7738568f0028a0c86c6ff
-
SHA1
fa777a83a0b2712fbf2e5ffe76227599281d4f67
-
SHA256
6efb0a30933dd02cdaf486f772b4f946cc17b71972e34de21e9a4ba080f5b75b
-
SHA512
82ef41ab64886d3a07568e3392d2e92400a16da3399dcc77ae396f756d28c8492ced04b094579bba0fc07873eed2c702aab96c82bf5e0d125be17632e246fa14
-
SSDEEP
96:oXGAxyBneWrDACNdoKrbjcXJkwhjJN4DAPpYxOBDTuerCS9b2AQkKkgcwQwTK:IwBne4DYKbjcZRkAPqxKXuerR2kgUwu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 343b28634fe7738568f0028a0c86c6ff_JaffaCakes118
Files
-
343b28634fe7738568f0028a0c86c6ff_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE