Static task
static1
Behavioral task
behavioral1
Sample
35f243462153d1c3a01ee0db14fae46c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35f243462153d1c3a01ee0db14fae46c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
35f243462153d1c3a01ee0db14fae46c_JaffaCakes118
-
Size
32KB
-
MD5
35f243462153d1c3a01ee0db14fae46c
-
SHA1
fa9b402272f9d96fa4827bbe30e994115e4e7fd1
-
SHA256
0679c2c4e3bf904930a2b2586a377b96c76db160d351b5effcf9e83ea78c03c8
-
SHA512
67a9232687f08520b2462736c5d54a45e89f4e29b6353d07627a7e9b3962568dbc92ac509ff851221256e6218d0b6dc057a690f2a72848e0adfa13cbb02c1648
-
SSDEEP
768:nc0X9D/CAJJwwta8e4t29Oj0c/S8U6xe8EdBChu:nfJSw+k26/S8UG3EdUhu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35f243462153d1c3a01ee0db14fae46c_JaffaCakes118
Files
-
35f243462153d1c3a01ee0db14fae46c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
no Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pujmptmf Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sjo Size: 608B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE