Static task
static1
Behavioral task
behavioral1
Sample
37af469f8a7e8eb9f5124d7f1314533b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
37af469f8a7e8eb9f5124d7f1314533b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
37af469f8a7e8eb9f5124d7f1314533b_JaffaCakes118
-
Size
295KB
-
MD5
37af469f8a7e8eb9f5124d7f1314533b
-
SHA1
b332201243267e05b62479bbd774bb9cf4660107
-
SHA256
0430b6fd7d7bb32b14900fc2570b9d30d5d4f20253f614181adc33c3618919d3
-
SHA512
d125fb33aa70b7e6827c0c01d1b17cac0c2f1364037efe55d9b5a8774f27afe369a3038928077b6032f5366bc8d86775e3cc5e983719f69f7dc8dc832cf0af25
-
SSDEEP
6144:XtkVwyDnrqlJy+j8pEC0CDXoOlHkvByXm3YhaMHtJGn+n6y:XtkVwyDnsJJvCToONkvBGm3Y4wt4n1y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37af469f8a7e8eb9f5124d7f1314533b_JaffaCakes118
Files
-
37af469f8a7e8eb9f5124d7f1314533b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 282KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE