Static task
static1
Behavioral task
behavioral1
Sample
345d89d410f8b861e7fe4737b6359f00_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
345d89d410f8b861e7fe4737b6359f00_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
345d89d410f8b861e7fe4737b6359f00_JaffaCakes118
-
Size
73KB
-
MD5
345d89d410f8b861e7fe4737b6359f00
-
SHA1
6dfcf34d21899f50692d9bed901dc3c3c4e9d0aa
-
SHA256
e55729d764e204811aede03661e8e5e322f5db8d516d3b3ed6451d9e415a35eb
-
SHA512
1e10a93794e469d628116679086d76f3d3d63412039f853f749af0ed97d07eef7df447afb8d081c8237d042ac89ed7771c00cf074cf22f05c9654952a76cbe5f
-
SSDEEP
1536:2Z6fR3sZw4EGg13g9q1zXZUT8Xpb2d2M3Nq/4JkJGMg1i:pR3skGew9CJ285Y2MM4ylei
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 345d89d410f8b861e7fe4737b6359f00_JaffaCakes118
Files
-
345d89d410f8b861e7fe4737b6359f00_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
szrmghh Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7eu Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE