Static task
static1
Behavioral task
behavioral1
Sample
3a89193c5998cf34f30ffe06be81e559_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a89193c5998cf34f30ffe06be81e559_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3a89193c5998cf34f30ffe06be81e559_JaffaCakes118
-
Size
10KB
-
MD5
3a89193c5998cf34f30ffe06be81e559
-
SHA1
c113f24322865a0464916f95e15dcf17a312d06b
-
SHA256
705f78fe4b7a61ee537a7032c9559dad4165b0f659189357ca24d1b2e1de8296
-
SHA512
3647dd47b741f63afedaf880e9b993b61c82389cffe8847ca0fca7da5fa0f4620a9e59b53fce487104d5973349aec8e6388d6872131e0f09e712eca22c6796c6
-
SSDEEP
192:6URsdQllbKTSUgJm+b1iNNhZtUh3qOI5T4pRHL11sNLU5Dx/n8X:rRs0wgJm+iNptC3zIaSo/n8X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a89193c5998cf34f30ffe06be81e559_JaffaCakes118
Files
-
3a89193c5998cf34f30ffe06be81e559_JaffaCakes118.dll windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ