Static task
static1
Behavioral task
behavioral1
Sample
aa3f9310a5cbb3fdb325521aeab4be08_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa3f9310a5cbb3fdb325521aeab4be08_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
aa3f9310a5cbb3fdb325521aeab4be08_JaffaCakes118
-
Size
9KB
-
MD5
aa3f9310a5cbb3fdb325521aeab4be08
-
SHA1
f428f8bd2437494a0af65f18cc89232b91ea8832
-
SHA256
9325455fa24a8a9921b8d5ccf4b92b19ef91372558150d4264ddbcde05e6ab08
-
SHA512
34aeae408230bf51c4e71b4bbfb9d73be59ff4870c7c913707acfce91ec776fa9ad94f2f4936659d957419f3c8b05eb8627c66d1a85435d8961ca513e2e1773d
-
SSDEEP
48:q8iYuIBYMKjuHCwGrBEKZEmRKce96l0bUhl2kYoY:ZCIEuHCwM5EtcetwQklY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa3f9310a5cbb3fdb325521aeab4be08_JaffaCakes118
Files
-
aa3f9310a5cbb3fdb325521aeab4be08_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 674B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ