Start
Static task
static1
Behavioral task
behavioral1
Sample
3e8419efad287aecb4cd86f5f9ab297e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3e8419efad287aecb4cd86f5f9ab297e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3e8419efad287aecb4cd86f5f9ab297e_JaffaCakes118
-
Size
12KB
-
MD5
3e8419efad287aecb4cd86f5f9ab297e
-
SHA1
155ca6e4e67c87214a49d72b40493944f65d46bb
-
SHA256
ded299d0b0f52dc08cedff1472969ec1d867044524ba45e50acb5bea08502e49
-
SHA512
8b63d677d6da94ed70c462eb544973dc0cb093fdea1d9e9215af47d405441ced0538bac2915e2ba7c0bd8381e649c8b962f3c31ee50cc65523033b833203e517
-
SSDEEP
384:jgVWg6VFU6X8HgNlaE7WyeJhcM7HduZWEWz39MxPocMw+:sAgOFU6sgNlaE7WJBduZBWjePocMX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e8419efad287aecb4cd86f5f9ab297e_JaffaCakes118
Files
-
3e8419efad287aecb4cd86f5f9ab297e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE