run
Static task
static1
Behavioral task
behavioral1
Sample
003a23789e477b05850dee39d5262c89_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
003a23789e477b05850dee39d5262c89_JaffaCakes118
-
Size
14KB
-
MD5
003a23789e477b05850dee39d5262c89
-
SHA1
df3c0aeccff48a74f0ce357efd3cae8c1790a587
-
SHA256
d7cae41cd1817dc3537ea2b2e6518c7ace48a18380c3b17a08c0dae564577f1d
-
SHA512
f60d4dac022a7251f11dec0768bd2c4804f27d1bcab7cb5341a1bb8ecbe2eba08104b2d40e46543c578562f9316f1b5c9fad84e1e87d99f45c891602d4ce6058
-
SSDEEP
384:pqufoa2vDxru5KyxdCTCIrcHzWoSz9mSbef0an:Ka2Vru5dCnrcqbGfzn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 003a23789e477b05850dee39d5262c89_JaffaCakes118
Files
-
003a23789e477b05850dee39d5262c89_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
�*>M0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�*>M1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�*>M2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE