Static task
static1
Behavioral task
behavioral1
Sample
3641bfde443da53f210414a2aa6d212a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3641bfde443da53f210414a2aa6d212a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3641bfde443da53f210414a2aa6d212a_JaffaCakes118
-
Size
123KB
-
MD5
3641bfde443da53f210414a2aa6d212a
-
SHA1
2c202c5db4c555e61c3628b64e0dc878e5cde30e
-
SHA256
676771cc870e4b2ab8d6f769881b8d0f16ab592a4150e2aaf117c7e8c1f062bd
-
SHA512
81b8f7d1a5b6e44ef60b8fa4757f3d1101cb7b1b85377d0d5712d5306d117e6f71ac9c9372d70ca7f3ac260fd7537404cfe3089567c7f8eff58514fe1c065947
-
SSDEEP
1536:OrS6CKNl3wRD9hMFfBqMgUWKYhBRS8RpCrAuEGEO:OO67l3QulgmQBxYEG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3641bfde443da53f210414a2aa6d212a_JaffaCakes118
Files
-
3641bfde443da53f210414a2aa6d212a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE