Static task
static1
Behavioral task
behavioral1
Sample
366c3b64448c17b2cc0bee6da0557fc1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
366c3b64448c17b2cc0bee6da0557fc1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
366c3b64448c17b2cc0bee6da0557fc1_JaffaCakes118
-
Size
132KB
-
MD5
366c3b64448c17b2cc0bee6da0557fc1
-
SHA1
32f27e2895b6a10c619b4b1903ec7a9b7b9c4761
-
SHA256
e3b92036d694b6b0582f51aa47e2f2d9c4a24b27394ae13c15e53cc2671be40c
-
SHA512
23353c91522dd4273bf59c41587b6f5223f71f1dc134f4df97fffa1028d4c3b2cd250f42ad226f248efce2b0546ccdf6e500f0ff08c27271a0a4b4f85328ebc8
-
SSDEEP
3072:J/2WK0sXD7mNOk8546sceMd0x+T52hre1ABx2pG:VtUmNOfscrdXoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 366c3b64448c17b2cc0bee6da0557fc1_JaffaCakes118
Files
-
366c3b64448c17b2cc0bee6da0557fc1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ