Static task
static1
Behavioral task
behavioral1
Sample
3d8fafad2ee25694cff0120a472a95b5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d8fafad2ee25694cff0120a472a95b5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3d8fafad2ee25694cff0120a472a95b5_JaffaCakes118
-
Size
223KB
-
MD5
3d8fafad2ee25694cff0120a472a95b5
-
SHA1
d7a737e730950f6ea628fe3872bccbabb040f862
-
SHA256
cc865a2bd52a61010914e65acff7ed60ba3af31e6e74bb08870ca25ddaea592d
-
SHA512
0bd846f7077f86a9bd7abdbedf68ed0a17075c4aaadb3f95e45168d3efe54dff2aad56bd85a02ddca84343793a1501764761cfb353d085ef7c590cddec56dc14
-
SSDEEP
3072:4ZO4Rd/yv8GoZegvVSbymnDSnyHOTgkTCxktFy7JHVtWZdncjlqDDHgXJYVXmpa:F4r/iEIznun5gsdW7NVtWDcqkYVXm4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d8fafad2ee25694cff0120a472a95b5_JaffaCakes118
Files
-
3d8fafad2ee25694cff0120a472a95b5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 104KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 116KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 113KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklav Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE