Static task
static1
Behavioral task
behavioral1
Sample
3ce4da0f8297b01f582d6414f1869270_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ce4da0f8297b01f582d6414f1869270_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3ce4da0f8297b01f582d6414f1869270_JaffaCakes118
-
Size
295KB
-
MD5
3ce4da0f8297b01f582d6414f1869270
-
SHA1
064ff25dc19df2ecccfc4926b232435cdecc11a8
-
SHA256
860322ae5bdd5d70ab3a08bb4452594c8bb25f84fbd348ca311d029b8709ddd2
-
SHA512
4642be6f2048690f4802dade8ab2b1d476322eceb05342216e2ef5ed717d1b5514b7bf6d87e0f763fee6ac246a1ffff4d95a2e12551c6ebd645cce24e7f044c8
-
SSDEEP
6144:2JMflPDKlhBl6pnlnPcFacgNYfSP8OifJiZqRXansoHCvnVBGbdpow:2ifluv2pnZkFacaUxiZqRXSAVBGhpow
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ce4da0f8297b01f582d6414f1869270_JaffaCakes118
Files
-
3ce4da0f8297b01f582d6414f1869270_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 282KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE