Static task
static1
Behavioral task
behavioral1
Sample
3c13373e864ebc35ad5b93ff10c3a91c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c13373e864ebc35ad5b93ff10c3a91c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3c13373e864ebc35ad5b93ff10c3a91c_JaffaCakes118
-
Size
33KB
-
MD5
3c13373e864ebc35ad5b93ff10c3a91c
-
SHA1
1568d9af976ef855a13104320a1f44d9d40455cb
-
SHA256
7fd9cbe1b1f2b871aa220ece276fa1f8208faabfcdabf13e279dade9a8c79504
-
SHA512
0993cfd9fc5d8b7f4d81826e92c04314c1df1fa79e0574addce29bfef4f2af980f8e04ac80dfbd87917e4a6476831a94d2eb605b3eb4f9d06c985f2228aac7de
-
SSDEEP
768:rwsU8iDR2lleK79M0HxeiC+kP5mDSr5kRMULXr:rLUelHyhVx5m48LXr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c13373e864ebc35ad5b93ff10c3a91c_JaffaCakes118
Files
-
3c13373e864ebc35ad5b93ff10c3a91c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ