Static task
static1
Behavioral task
behavioral1
Sample
3af18628b3def3ae0eb052c01df54384_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3af18628b3def3ae0eb052c01df54384_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3af18628b3def3ae0eb052c01df54384_JaffaCakes118
-
Size
7KB
-
MD5
3af18628b3def3ae0eb052c01df54384
-
SHA1
1312e445418d889f9602948b32478c2fd74fb96c
-
SHA256
492a964ed20844012feaa97a72423525aeb64d9ff375d37e6a57e55a887e198d
-
SHA512
f6b8435e51aca65a876e61f485b17ed052c5eb89b23197b38d28920093aea30eeffa5ac4469cd4c0dd00356c66c43795995428bffae95b439cdb8df80f874c1d
-
SSDEEP
96:+6bGxjEx8EIJ2MphwkDA19jO853Engg8uDwQnf:wEx78ow853EggXMQnf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3af18628b3def3ae0eb052c01df54384_JaffaCakes118
Files
-
3af18628b3def3ae0eb052c01df54384_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ