Static task
static1
Behavioral task
behavioral1
Sample
3d7ab55f5fb6fd8e79a0fd7934f3d4d7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d7ab55f5fb6fd8e79a0fd7934f3d4d7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3d7ab55f5fb6fd8e79a0fd7934f3d4d7_JaffaCakes118
-
Size
76KB
-
MD5
3d7ab55f5fb6fd8e79a0fd7934f3d4d7
-
SHA1
d6c0ad86db0faf3d8e53cb775822a15533f9ed34
-
SHA256
415116bd845fadfa69f20644a4a3141630462cc0af691f3d9f6e707d65e58250
-
SHA512
b9d9cd47a730285224905a289c711d40dbef42937b6efefe86dc88ace375bbbd59c9c79569b1c188ffefeba8aeea656e8c5a2c750900ee272c4391a4bc12383d
-
SSDEEP
768:/znWqtXQDwJvO/EE58dFL/3F5JrTQxdR8/0ImLGvBJ9XqmZ4YYILTN5BBx1lJ951:DWqlQZFORvnQxWvxqfIqnToIf9JUMbK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d7ab55f5fb6fd8e79a0fd7934f3d4d7_JaffaCakes118
Files
-
3d7ab55f5fb6fd8e79a0fd7934f3d4d7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ