Static task
static1
Behavioral task
behavioral1
Sample
c8308fd750830acea91501d40d3e129c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c8308fd750830acea91501d40d3e129c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c8308fd750830acea91501d40d3e129c_JaffaCakes118
-
Size
21KB
-
MD5
c8308fd750830acea91501d40d3e129c
-
SHA1
f0fbebe749565aaa020201feaf4c61cb2f10fdb9
-
SHA256
5ef3a4913dfe4295d420daa0723b3e891ec71fc053ffecbb77896e74a9af1ef9
-
SHA512
d3d11d6f38e390aa317a47e9724771cd12ddbb53eeb47dcb7e35c3b56e9558fcaaba75d6d0798cc200e629564fc1ec61aa8f0cd38460813983fd388a6b8f8052
-
SSDEEP
384:AePb9ff3Do28MbxPZ1C6ypgpIXJRAuSiM4vMT9e9/1gDDeGmm:AY1L8MVPZ1C6YpXJmuS1I/1oD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8308fd750830acea91501d40d3e129c_JaffaCakes118
Files
-
c8308fd750830acea91501d40d3e129c_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 283B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 14B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ