Static task
static1
Behavioral task
behavioral1
Sample
03069a2f84170a625a2172afa73f381f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03069a2f84170a625a2172afa73f381f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
03069a2f84170a625a2172afa73f381f_JaffaCakes118
-
Size
12KB
-
MD5
03069a2f84170a625a2172afa73f381f
-
SHA1
1245574d052b24c6174fe0edb02db422422f9ed6
-
SHA256
3478a116f58ebf66894ccc0126a315825c5034f6ac582a14aed5c95045bae170
-
SHA512
1b5389864ca8669fb82efa30a00db4544e19e568cc75b4ce78b8631eabe043d977d4aa47f8c2f94d667b865df253419381e0cf82f9c25483020bb07a122c5de9
-
SSDEEP
192:1B+UwHguMAjHW6TxDL5PvHaHHMRG2qHhU0lrxJJvV:1MlAiPTxDtf4HMpqHhZlNnV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03069a2f84170a625a2172afa73f381f_JaffaCakes118
Files
-
03069a2f84170a625a2172afa73f381f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 774B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ