Static task
static1
Behavioral task
behavioral1
Sample
350e8505d193bbff576f8ab9ed799485_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
350e8505d193bbff576f8ab9ed799485_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
350e8505d193bbff576f8ab9ed799485_JaffaCakes118
-
Size
97KB
-
MD5
350e8505d193bbff576f8ab9ed799485
-
SHA1
43b39aaf4075668179c7f17496f28c6d48953543
-
SHA256
09763f5e9ba985558ccbcad075b33f75d82ef989393bcb869926a42535da1d9e
-
SHA512
426b12ad4205d9c14f0b16082f51a5f991541e39414d9dd85938f3cbc5afec6eb5bb2fe825212721f00ce889cf72c7cfe478d42284a93518e68e1417ce419a0d
-
SSDEEP
1536:TKF4OpaKKpGAGVk39sUn1oOD3jNsAR3az1wFtXAfX3HiqzKtBWxNUSBkdX++9m:TKF4OuWV67DD3jejf3Hic8B0j6m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 350e8505d193bbff576f8ab9ed799485_JaffaCakes118
Files
-
350e8505d193bbff576f8ab9ed799485_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
CODE Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE