Static task
static1
Behavioral task
behavioral1
Sample
35a25f5d4a65e705379a0d07e5ee3c05_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
35a25f5d4a65e705379a0d07e5ee3c05_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
35a25f5d4a65e705379a0d07e5ee3c05_JaffaCakes118
-
Size
308KB
-
MD5
35a25f5d4a65e705379a0d07e5ee3c05
-
SHA1
e3cf623b82549c01581f2d4b7ad3307235fc6a2c
-
SHA256
ba96d33faf2cba899e66cd197b1ab12f70fbe9cf9662942babed01ac1692d91f
-
SHA512
d8e110ac7f8cff1fdf0f1735dbab66f8d94398a932a15974bba73a0bcef9cc2d60b6c62c1c2664ce99877b3851c31239caf0713b9b48cef84b2eff01985a83c2
-
SSDEEP
6144:y2Sqdm9AtDSMaBde+Tlsu/TjZvywF6hYRPqG3TBUklkxQw8rxwSiBev:yAhBSMaBdhTbT1pF6WNDyxQw8lcu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35a25f5d4a65e705379a0d07e5ee3c05_JaffaCakes118
Files
-
35a25f5d4a65e705379a0d07e5ee3c05_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 295KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE