Static task
static1
Behavioral task
behavioral1
Sample
295b351dd2df6a703441f92c88989866_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
295b351dd2df6a703441f92c88989866_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
295b351dd2df6a703441f92c88989866_JaffaCakes118
-
Size
128KB
-
MD5
295b351dd2df6a703441f92c88989866
-
SHA1
b1a1ab2c6ccf865d592f7c13d9129edbbbd68778
-
SHA256
b7399c16e1ae93e7b4049e7dded40a830bb83ddf4e4aca4a25cc7a39f5dd8d40
-
SHA512
0eac9e0537487b4870b2466fb538d7200386086738fac1496c24136246ecee1f461e620376964286b24583171cd880f2cf9f4269e5cd2f96ddef1ba87ae7cf9d
-
SSDEEP
3072:MLiNnGmQvNxBPNjpLoQV4pWRDAadl+T5s0fwxaF02J0:MwnOvNxNNjpotAJ+T57wk02G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 295b351dd2df6a703441f92c88989866_JaffaCakes118
Files
-
295b351dd2df6a703441f92c88989866_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 240KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eevcivgc Size: 580KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
enaugvai Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
enaugvai Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE