Static task
static1
Behavioral task
behavioral1
Sample
d3d13853a8de23ae8171e1e42c0282f3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3d13853a8de23ae8171e1e42c0282f3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d3d13853a8de23ae8171e1e42c0282f3_JaffaCakes118
-
Size
123KB
-
MD5
d3d13853a8de23ae8171e1e42c0282f3
-
SHA1
3c6a03d36d0e50bc03b16dac80ce7fb40577d23a
-
SHA256
f6997e8b7bcf0b6d1891e931ad802aeab4efa425f375fca2c84870c1a4853b05
-
SHA512
97382b69acb09c6baf7353481ed5a458085c2827c14e84303f91fd589143acf8df2f9424116fbdb2aa712796ae18fb0c854ecc0e0024040f70d864356a769601
-
SSDEEP
1536:pYJWBA+BTvQt/aOHNpRpBUCEz3LyJ4sGlcBqsaIPIat7:pYwnBTv6yOHrRpi/rWJxacQsaIPIat7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3d13853a8de23ae8171e1e42c0282f3_JaffaCakes118
Files
-
d3d13853a8de23ae8171e1e42c0282f3_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 689B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE