Static task
static1
Behavioral task
behavioral1
Sample
39236ff013d90cc30a4e97d27f0e8eb3_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39236ff013d90cc30a4e97d27f0e8eb3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
39236ff013d90cc30a4e97d27f0e8eb3_JaffaCakes118
-
Size
30KB
-
MD5
39236ff013d90cc30a4e97d27f0e8eb3
-
SHA1
ed9bf866d2c3491c1a07538894e8ec91150c2ea5
-
SHA256
ef9dae2ec03df9bfeeecf0a352f6a7ef99ced89446c8238fbe8c0369ee712da8
-
SHA512
ecce7a64995c19106f3231c9c44d0b1ef2a94df20cf0231b96d60b1f2eff7999f3c71d7f3160829cba7ed1812484a9b7730fba7bf75abd4506f4effef15b83d4
-
SSDEEP
768:FQ2A/+ZRO7c61I/ELTx0ByM54vBrJ7LxrK8ESoDUJEUwrY:FQP+ZR+jfeyM5GB9FK8ESog5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39236ff013d90cc30a4e97d27f0e8eb3_JaffaCakes118
Files
-
39236ff013d90cc30a4e97d27f0e8eb3_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
htdgxh Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qran Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ztebhrt Size: 443B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE