Static task
static1
Behavioral task
behavioral1
Sample
de3a1324adc44ebd4386eef689ea67ea_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de3a1324adc44ebd4386eef689ea67ea_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
de3a1324adc44ebd4386eef689ea67ea_JaffaCakes118
-
Size
309KB
-
MD5
de3a1324adc44ebd4386eef689ea67ea
-
SHA1
24aa5fef9d33c45739a3ef9e3a8026592dbe9240
-
SHA256
d842b174a45d44d879424004c3b0d28e73d700c8d1b49a2ec08de538826542d7
-
SHA512
53fa6572cb8f6e4162ba7523a9188c24654e994dab202d1fe3248da2a41bd496207a31ec281aa4957c8cdb960235174ffecb37e45e967a63ec561640062165cc
-
SSDEEP
6144:eOaBNJ2dTtKQuXJ2gvBH98qQv5ycK0/LwnQb5dNkPk+:eOmrmXuX0qBHkMfE+qNEx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3a1324adc44ebd4386eef689ea67ea_JaffaCakes118
Files
-
de3a1324adc44ebd4386eef689ea67ea_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
CODE Size: 282KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ