Static task
static1
Behavioral task
behavioral1
Sample
3a605c235dfff40a91e0747184ee56b6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a605c235dfff40a91e0747184ee56b6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3a605c235dfff40a91e0747184ee56b6_JaffaCakes118
-
Size
97KB
-
MD5
3a605c235dfff40a91e0747184ee56b6
-
SHA1
6b11c3d0e82d23419117b6d6887b3204195e9947
-
SHA256
9d562142bef14cf3788bd01b1a8138b7c27ffb881b04f42a7715147607d5702a
-
SHA512
4fe62abe7a9122626a26ff0ae1d0e4a907c7503436a8f951a2f0fffa509ec9db39450106a4abe7b0e91fe16168b37e30e6334c8b03df7b406dc15a6e83e4d2aa
-
SSDEEP
1536:emmK3BuWub155eAnw4kj5nq6Jc4YM0uNPt8rwZkKsV:jh3zq1eywbj5qsdYDWVZds
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a605c235dfff40a91e0747184ee56b6_JaffaCakes118
Files
-
3a605c235dfff40a91e0747184ee56b6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
yhsafe Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
yhsafe Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yhsafe Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cyclone Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cyclone Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Silvana Size: 331B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE