Static task
static1
Behavioral task
behavioral1
Sample
0350eefbedbe217a970efe85974dfcac_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
0350eefbedbe217a970efe85974dfcac_JaffaCakes118
-
Size
886KB
-
MD5
0350eefbedbe217a970efe85974dfcac
-
SHA1
3ae241425fca235e2822143749f4d9a1b492aeec
-
SHA256
b281bab92ba2b523b836ef70d3ca62dfbea001c0167e871df29bcc1afecfbed1
-
SHA512
013143931bb6c1ab61e48ea2b177b3ff35874d97f7cc8da239367983a8ea1e0569f18a978a5fe97defff71eb84be362b0effe609249e1438490bd8ac93bddbd9
-
SSDEEP
24576:2pj/R8I3y6ImvJUv0LUwghKna10N3dH3:O/KWghQH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0350eefbedbe217a970efe85974dfcac_JaffaCakes118
Files
-
0350eefbedbe217a970efe85974dfcac_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 632KB - Virtual size: 632KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ