Static task
static1
Behavioral task
behavioral1
Sample
3f44ab754752344e81620ee35b862b3c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f44ab754752344e81620ee35b862b3c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3f44ab754752344e81620ee35b862b3c_JaffaCakes118
-
Size
5KB
-
MD5
3f44ab754752344e81620ee35b862b3c
-
SHA1
b7d3212821f378f9ce0a8d850de16b43da7e864a
-
SHA256
ba272df8916a5de291200242b50d4eff525e9f6fef9a550f3b0a8aeef6a158ea
-
SHA512
51a132dc1ede555b58e6941411cc136aa08d92661a9d51cee834f5b838009b9cf12ef9586f5748129df56ac8a8de75be2e6eac70238acdbfd8528508304d12ed
-
SSDEEP
48:ZPtd0YDDQTqhRC2UsEnYtxz/9t+MmsVGlsju/JROGkgX7t1GaiQY6pvw8xMT28dn:ZV2AH1weeRk1QYk5xMT28wWeue+ozOF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f44ab754752344e81620ee35b862b3c_JaffaCakes118
Files
-
3f44ab754752344e81620ee35b862b3c_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.code Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE