Static task
static1
Behavioral task
behavioral1
Sample
430a2036b67df867c36d05da4a7db2cd_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
430a2036b67df867c36d05da4a7db2cd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
430a2036b67df867c36d05da4a7db2cd_JaffaCakes118
-
Size
23KB
-
MD5
430a2036b67df867c36d05da4a7db2cd
-
SHA1
6c7f51dc2b9168d5ea9220c9443a6cebb95607b8
-
SHA256
78bc720ca6ada82e8b141e33f918ee1de9f69060e772f7cea1c58fe58cd48351
-
SHA512
4b514aee31a01d5fd2d7b528b2c807b1205aad11fe34a5e26ac1747801a14a0e0653c6547150f7dc51501690fdcbe51b011ddc107d9227647e18854e9e8dba33
-
SSDEEP
384:ahmpov1wMsvNWXWKsHSrcaNSYi2vDdbH6DEbse1eaf2U7TQp4odtPTCY8k9xU:fpka91WGdyrqGH68sDaf2UHQp4oHmfkf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 430a2036b67df867c36d05da4a7db2cd_JaffaCakes118
Files
-
430a2036b67df867c36d05da4a7db2cd_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 686B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ