run
Static task
static1
Behavioral task
behavioral1
Sample
34f4eac5894fa5f0b4774c4b54462110_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
34f4eac5894fa5f0b4774c4b54462110_JaffaCakes118
-
Size
14KB
-
MD5
34f4eac5894fa5f0b4774c4b54462110
-
SHA1
a18c88c8110631c5f6cbeffc6cc4228457f2ec7d
-
SHA256
8100df8e413072160a63c3ef1e562d21f6853eed8cbf253dbbc8ae4ddea58668
-
SHA512
a3902b0d590dd61ce9eb8657fad34ebe741645035c93d9cfd270705ea45a44233a83cc0d8b75afadc2781242958333da63b05b8705560d854a7345379137dc6e
-
SSDEEP
384:p4fea2vDGDdapHm9BNmWMlEnL19sdbqpBBARbKeJH:Pa2edb9HmZELLsdbIWRWeB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34f4eac5894fa5f0b4774c4b54462110_JaffaCakes118
Files
-
34f4eac5894fa5f0b4774c4b54462110_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
yO�E0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yO�E1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yO�E2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE