Static task
static1
Behavioral task
behavioral1
Sample
fb3b24d52171c435693037245402109f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb3b24d52171c435693037245402109f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fb3b24d52171c435693037245402109f_JaffaCakes118
-
Size
32KB
-
MD5
fb3b24d52171c435693037245402109f
-
SHA1
cf1474fc2e0ef67a0e1706bdd9c58c0d7f65a6f7
-
SHA256
60565ddbe4e1a1e428a4deead685657b36011ae831829f2cbbf738b79a6c42dc
-
SHA512
202b8d8c5f3a135dffd2435c6c221d8238424dca8c51a5ee5ca51fce9a874b6b131f481ed8eb591f6bd8308509e2a62330aa3cc3dec0652e3a04041afe0403c4
-
SSDEEP
384:Cvzj//RfqZ//4X7q2ilS+pe8Sz9lnBHvYfbeL00LpyiRO9PogQoWKGEygQiJuphf:k/AZS+VMzJAfglLpvE9qoW32JusJDNC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb3b24d52171c435693037245402109f_JaffaCakes118
Files
-
fb3b24d52171c435693037245402109f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ