Static task
static1
Behavioral task
behavioral1
Sample
4382758af4905e6601b0a4d281c31335_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4382758af4905e6601b0a4d281c31335_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4382758af4905e6601b0a4d281c31335_JaffaCakes118
-
Size
90KB
-
MD5
4382758af4905e6601b0a4d281c31335
-
SHA1
31a7936128dacb998ed3924aa7d2032318439c7b
-
SHA256
1fa281c5e64e0ea0a3f474cd0431d83097d59741b933e654d7ac6a8d8931b98f
-
SHA512
f69b4a357b7bea799e7901b48c8f822793919042f2d4e33e57ee4b2eb6078f6b05f133e827fc3213cb1795bf7337fef16a50fb8c90cda379b69abec00462c52f
-
SSDEEP
1536:RI7EQ3FAGbfOcn0F25c764UvnZ6r0lbRb:C7fSG6W0FaS3Ulb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4382758af4905e6601b0a4d281c31335_JaffaCakes118
Files
-
4382758af4905e6601b0a4d281c31335_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.tttt Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdddd Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dddd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
woria Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rerer Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MABIDE Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ