Static task
static1
Behavioral task
behavioral1
Sample
034a4e0090f94a7c86cb33b1cc1c9e18_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
034a4e0090f94a7c86cb33b1cc1c9e18_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
034a4e0090f94a7c86cb33b1cc1c9e18_JaffaCakes118
-
Size
8KB
-
MD5
034a4e0090f94a7c86cb33b1cc1c9e18
-
SHA1
cb18cdf7e62b18d2b29b3df59d51c86453a06ef0
-
SHA256
690d350b8201d69e6c42c3ed7ac10c67002f191de5457fe7bc51712dccccbf2e
-
SHA512
4eaab3a1890f5bc583bb0498eb6dd66ce48db87dbd81be8cdeab931300d5c82bca51fac7c20d16fae2f4423a6bc76beeaec9aa168f3cb37ae9a9cb0e21d9af2a
-
SSDEEP
192:Ke7+B+DRPpggGQdEglItTBV1Q3zde91Q1hbT7QQLZkgUwuzN:1c+DRPvEbRb1QjS4h7JWtN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 034a4e0090f94a7c86cb33b1cc1c9e18_JaffaCakes118
Files
-
034a4e0090f94a7c86cb33b1cc1c9e18_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE