CreateGameProcess
Static task
static1
Behavioral task
behavioral1
Sample
3c61e687d39baec2db796cdf8de250f2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c61e687d39baec2db796cdf8de250f2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3c61e687d39baec2db796cdf8de250f2_JaffaCakes118
-
Size
593KB
-
MD5
3c61e687d39baec2db796cdf8de250f2
-
SHA1
63c2a0cc3cfb4a1988ebe41ebfe2bda68d76e309
-
SHA256
9739f33c498bf1516a94d21731b21d65875396129ae5af24df74a730498e9e64
-
SHA512
c9efbe0afe5c0391953d9584752a19fab9dafb06aa25a2e91f19e1af082b50db331d5c31cc5fb2b7e17ad81796021bddbcaa115849fd8ec65beac95c4858a058
-
SSDEEP
12288:I3/cqTTcDY9gewUOA9RTuKYcxbBasPeFe4+iChk6cFGc5:I3/fcDYJwS97bEhAVS5E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c61e687d39baec2db796cdf8de250f2_JaffaCakes118
Files
-
3c61e687d39baec2db796cdf8de250f2_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
eIU Size: - Virtual size: 26.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 580KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ