Static task
static1
Behavioral task
behavioral1
Sample
3e232659c7e6b8e42ce4c7c8f0020865_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3e232659c7e6b8e42ce4c7c8f0020865_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3e232659c7e6b8e42ce4c7c8f0020865_JaffaCakes118
-
Size
29KB
-
MD5
3e232659c7e6b8e42ce4c7c8f0020865
-
SHA1
606b3bf891b5d4476748b12cdf6eda4b5168766e
-
SHA256
1a6293dc82ee4c60c1c4cc814fc071929dbd6c2727826a8d82193b7121112248
-
SHA512
7df199f876d5082e3c86d48afd13b9cc17f3afffcb323ee90abd1a8aa29d22537dcfac62b18d4fdbc5bac2e1670b3c274d52084cace71791fb5570b9302e1522
-
SSDEEP
768:7BDApaQvjZlJudC2x/Y5DZ8FI81+ACDaabrczI:7FApaQrfkRx/eZP81Rv+r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e232659c7e6b8e42ce4c7c8f0020865_JaffaCakes118
Files
-
3e232659c7e6b8e42ce4c7c8f0020865_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
mmzzrtbi Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
er5bv Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
y74 Size: 171B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE