Static task
static1
Behavioral task
behavioral1
Sample
744b22fdc15043beee21e7686eb70383_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
744b22fdc15043beee21e7686eb70383_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
744b22fdc15043beee21e7686eb70383_JaffaCakes118
-
Size
79KB
-
MD5
744b22fdc15043beee21e7686eb70383
-
SHA1
370ef8d1b18eed238a2fd8db81e1bb44807e6979
-
SHA256
f14ae5b0fc15a5302bbb011c8ba86cb29eb39899d4891cdb4d6490cf846821a8
-
SHA512
57efdb442f87b29d2e37dfb1a2408279b87a634aae59b326dd945c9f241659498625dd677f3306dfc2d52a727ad2fc8ac9aa796ad133e0bfd92f3f426ec6e677
-
SSDEEP
1536:N+amntsD2z4oQ3YoP2O9JVUEtMTISXKsLaw5l+dpyYVCgSHMRKzIXl6As71:N+FsKkoQIoP2OPueeRzOwbEAgSHM4IXm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 744b22fdc15043beee21e7686eb70383_JaffaCakes118
Files
-
744b22fdc15043beee21e7686eb70383_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 17KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE