Static task
static1
Behavioral task
behavioral1
Sample
34fc385926c84ff784d763c30847650c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
34fc385926c84ff784d763c30847650c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
34fc385926c84ff784d763c30847650c_JaffaCakes118
-
Size
206KB
-
MD5
34fc385926c84ff784d763c30847650c
-
SHA1
05105410c7ff09f4f776eef224db576295870be2
-
SHA256
a3a3f0690bcc5931a5fe09b65a51c1c3e0bc148e453d5c565ecf8087a12b2edb
-
SHA512
b3168c8a1f0de62e8d175ba4edcfeef8c900d15237d8d5efe641deb2f067caed535b8b24df2e50f4de84a8d7a5cba6ae10f50bdb5aea35715826dcbf465da7e6
-
SSDEEP
3072:YX9i8y5LHtaivRqAgCostBgN5nMd+pwCSL4zx2ASuhzLeSr:kOsCo+y5nRNSkLeSr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34fc385926c84ff784d763c30847650c_JaffaCakes118
Files
-
34fc385926c84ff784d763c30847650c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ