Static task
static1
Behavioral task
behavioral1
Sample
a3c8f3eb457c7007aa36ebafe71d53c6_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a3c8f3eb457c7007aa36ebafe71d53c6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a3c8f3eb457c7007aa36ebafe71d53c6_JaffaCakes118
-
Size
34KB
-
MD5
a3c8f3eb457c7007aa36ebafe71d53c6
-
SHA1
9f79d5846974616c613732a9bd6224616785a506
-
SHA256
a74aeaf0909fd68b47e24aea793721858394283f2bb1415e273e266f0899dab0
-
SHA512
833feadb955089bce247c29b8fe05da517c01f5a5160c7617cf7f083ebcce7a4727d19403a9b0dde7dec59832d79ccd3656e879c5460df8b27af63bd594dacbf
-
SSDEEP
768:A34nRoRqjFwX/Hf8wHj41lpVfn0UaEauU+75S0LIlZ2jM:84aRqhwX3ND41TWUmh+75SoIPwM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3c8f3eb457c7007aa36ebafe71d53c6_JaffaCakes118
Files
-
a3c8f3eb457c7007aa36ebafe71d53c6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ