Static task
static1
Behavioral task
behavioral1
Sample
38eca006320d7e8b9829befbef1e0887_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38eca006320d7e8b9829befbef1e0887_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
38eca006320d7e8b9829befbef1e0887_JaffaCakes118
-
Size
510KB
-
MD5
38eca006320d7e8b9829befbef1e0887
-
SHA1
36830f443b14c0f359fbf3b9a4fb4e2972e72a2d
-
SHA256
0cd71a1ae6602967157f4cb5865b159b92eb381e3bad168c15b45357022a0242
-
SHA512
56b70f0aa2372bf4dd296a603d88822accbe551da2ee515e64246d70e15f0fbcf1a7d9f9e5877015b5c2fa5a84c332b49caca49efe5fef39776da8024a580cd9
-
SSDEEP
6144:/qrjPneNWKeJanfd63dZ9AFrEV/Wa0CsgesAFEL8iD0LaT7HNaOVql+9y:/kjPeNWK1E9AFE0sJn2Gy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38eca006320d7e8b9829befbef1e0887_JaffaCakes118
Files
-
38eca006320d7e8b9829befbef1e0887_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 480KB - Virtual size: 478KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ