Start
Static task
static1
Behavioral task
behavioral1
Sample
3f8b66a992358f355a632dcbc5bc4e88_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f8b66a992358f355a632dcbc5bc4e88_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3f8b66a992358f355a632dcbc5bc4e88_JaffaCakes118
-
Size
212KB
-
MD5
3f8b66a992358f355a632dcbc5bc4e88
-
SHA1
f78ab4f81cde5c660b0fe5712966ab08872d2f4e
-
SHA256
4c22567f796942d7f6bb919f5c02e55495ea7b8f361e0482977fbc1f12c8c5cb
-
SHA512
72ac7686df4d191fa5edc17d13962fb4513a4c137324cbec3fda3d5ada64c973721125c9016e0b5c754463d4b6390bbdbdc478fa4dc94484ff705639ba089b31
-
SSDEEP
192:91j1LB7uXZuXmnXpBHhe+GHKY2t36uCTHNSBFk0QhsqGaB8K+VqegGSTnHLp7yAn:XL7u5Pg2t8TwvkxCqn2K+/STHByLI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f8b66a992358f355a632dcbc5bc4e88_JaffaCakes118
Files
-
3f8b66a992358f355a632dcbc5bc4e88_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE