Static task
static1
Behavioral task
behavioral1
Sample
03837a0d20b71fd6896d6d3fe2ced8f1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03837a0d20b71fd6896d6d3fe2ced8f1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
03837a0d20b71fd6896d6d3fe2ced8f1_JaffaCakes118
-
Size
48KB
-
MD5
03837a0d20b71fd6896d6d3fe2ced8f1
-
SHA1
e868ee66c5f2eac59cfb20cbd75520d9b2d45a65
-
SHA256
d24798b13ddf27f1fffc74727e54c53b9e6781b720a6cfaec0f7fdbb828cdd41
-
SHA512
259507e8a2b3d53925acacf602cba7c9b7c07c7fb6d0ba3d568d1bb319e548dbc331645cbfa33f872ca720b6f5d3b1be8349e1ee39629929be6fb727c7ed0a31
-
SSDEEP
768:ydcXAEWrJQye0G1PlJdN4MZ2q7gFZlr3/bxVkpzojcXvCw34Y8ql:/A1JQyenlJdBZ2XZlrPbxCpz+cl34Y8S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03837a0d20b71fd6896d6d3fe2ced8f1_JaffaCakes118
Files
-
03837a0d20b71fd6896d6d3fe2ced8f1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE