Static task
static1
Behavioral task
behavioral1
Sample
38b0a335b6d2a14e4c6fc52f9fec4df5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38b0a335b6d2a14e4c6fc52f9fec4df5_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
38b0a335b6d2a14e4c6fc52f9fec4df5_JaffaCakes118
-
Size
51KB
-
MD5
38b0a335b6d2a14e4c6fc52f9fec4df5
-
SHA1
91ef3b4304a3d13ad70daed9c3dedfb9179246a7
-
SHA256
cda6332dde0ca497807965d6c3290bef6cd0bb42abb2a8bbfbe754285cbe7d9c
-
SHA512
12c2dcc8ca15783169fc6dee20867983da7a17fcb3ae1a3766e97c14d6570842f1b791a3417d22fdc8a884870dece6e85811f3822fcf023755149cd90685874d
-
SSDEEP
768:0Ha6u1eX0o1oIk2oEAnGRdW1gmbgJFoyONqcO19OIXmCK8V7uBu2meyNz5:0H/uk51ozHGe16opqnqI7K8V7uBjy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38b0a335b6d2a14e4c6fc52f9fec4df5_JaffaCakes118
Files
-
38b0a335b6d2a14e4c6fc52f9fec4df5_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.DDATA Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������� Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ