Static task
static1
Behavioral task
behavioral1
Sample
399e3fe134f99e2932af55a555d26f75_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
399e3fe134f99e2932af55a555d26f75_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
399e3fe134f99e2932af55a555d26f75_JaffaCakes118
-
Size
32KB
-
MD5
399e3fe134f99e2932af55a555d26f75
-
SHA1
3f096dfb38885ff61530e46cfebcc601e24e0f47
-
SHA256
70729b4ac2b7f9702f24155118250f02760af8f82d7857fb6faed317f876d4e4
-
SHA512
4e093af98d9b0734c7ca2cc9882be51a330495d71f0d49ccec90691cd505bd016485d1fdedbaa39b16b535c59c95472d6712b1ecb953cc718da9f855eedfdc5a
-
SSDEEP
768:dkGOYMdwVIwuChvDVMWkI/6KsUTY9/vH9TU:yYqwuivhMT067W4C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 399e3fe134f99e2932af55a555d26f75_JaffaCakes118
Files
-
399e3fe134f99e2932af55a555d26f75_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ