Static task
static1
Behavioral task
behavioral1
Sample
3c2f8675b70e0d83e9668a21d2af563a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c2f8675b70e0d83e9668a21d2af563a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3c2f8675b70e0d83e9668a21d2af563a_JaffaCakes118
-
Size
16KB
-
MD5
3c2f8675b70e0d83e9668a21d2af563a
-
SHA1
6ce162797b3aa1e6b6f28ea6bcea2650f3a362f4
-
SHA256
2c0ebf7e2a0a2912dfb89ca9efc10f82f14e1155f61d735a8d172bc0562d22a5
-
SHA512
a6c380b8d335fb5b032aad101a8875baf60bc59137776be60cbbf241a619fd8ee773bac3a50456f3ebf3beee94a50d88b3f31e0abf490d0816d88daa6b2ea28f
-
SSDEEP
384:6J479ytlCTfTcIXia+y5D4zNdw2Q4rAk9s4yA9bJLrxW:6C0CTfTcIXp5DsNRhyOp1W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c2f8675b70e0d83e9668a21d2af563a_JaffaCakes118
Files
-
3c2f8675b70e0d83e9668a21d2af563a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.petite Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 904B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE