Static task
static1
Behavioral task
behavioral1
Sample
3894b7d3eef5f3df44430ee4592fa631_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3894b7d3eef5f3df44430ee4592fa631_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3894b7d3eef5f3df44430ee4592fa631_JaffaCakes118
-
Size
230KB
-
MD5
3894b7d3eef5f3df44430ee4592fa631
-
SHA1
4f1133db146692d31b3bd5748e8f95f1ed04ef07
-
SHA256
a8f4d14b54e7a9d907566c054630c8a99a84c9d4d3f89a83306ca9ee4ac4306b
-
SHA512
22cacb0bef82043f37c5d661abcd11d7746c8cb0255f8d5282f35459916e1fe09f15cffbb8653c3f7002700827b66bee9681bc06652808402320e51ff7591932
-
SSDEEP
6144:DbfvvFuRUBSJNpc+2WcW6c3IgeY7PkKSVl:f3AuwJwuJ3IgeYTZSV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3894b7d3eef5f3df44430ee4592fa631_JaffaCakes118
Files
-
3894b7d3eef5f3df44430ee4592fa631_JaffaCakes118.dll windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 152KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE