Static task
static1
Behavioral task
behavioral1
Sample
398591b0e02f5fbb4e6250f4e3dc44d5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
398591b0e02f5fbb4e6250f4e3dc44d5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
398591b0e02f5fbb4e6250f4e3dc44d5_JaffaCakes118
-
Size
316KB
-
MD5
398591b0e02f5fbb4e6250f4e3dc44d5
-
SHA1
63452624241d037c3cd0bd6dc101c322572ea345
-
SHA256
022eea2843bb6424f820577572d4e7fdf95591e748327d9f25c30515002746cc
-
SHA512
3dfa62bc7d2f8ac70c6ff8aaec08b7a09626a1d76e4f2088c0b4736507ed2bbfba0fea7c78f3afb60b41f694415fcda1aedff1c389669263615c9e2f1fe4469e
-
SSDEEP
6144:oFo42rFHbTrWyCP96SsuXieni+MM7UwsHvG1IlKasuCFfGiQ/:YoFr9WJwzQni+9sO1MBB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 398591b0e02f5fbb4e6250f4e3dc44d5_JaffaCakes118
Files
-
398591b0e02f5fbb4e6250f4e3dc44d5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 132KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ