Static task
static1
Behavioral task
behavioral1
Sample
34b94eac83d40483c1da4f676a541728_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34b94eac83d40483c1da4f676a541728_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
34b94eac83d40483c1da4f676a541728_JaffaCakes118
-
Size
35KB
-
MD5
34b94eac83d40483c1da4f676a541728
-
SHA1
d25f3a46439768028e6c016791faf637d4c17549
-
SHA256
6911c90cfa8a351406c48a1982eb45c2c616ff297adcd609133d207490dc24ac
-
SHA512
15f59620847a47517621ff145fa7f4c99a1fece007c4e28ae40209a94403beb8488ed89aff92205e90d9d37b7527cad17d3d506b3e7754e7d3760e6cad43cc06
-
SSDEEP
768:S5IYhbjBbWYBSyhcO8QCSSektMqByC1Qcd:S5IYRdvSAiQh+MyPL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34b94eac83d40483c1da4f676a541728_JaffaCakes118
Files
-
34b94eac83d40483c1da4f676a541728_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 22KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE