Static task
static1
Behavioral task
behavioral1
Sample
3b4ece437cdbd18a8b0a114446481e80_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3b4ece437cdbd18a8b0a114446481e80_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3b4ece437cdbd18a8b0a114446481e80_JaffaCakes118
-
Size
184KB
-
MD5
3b4ece437cdbd18a8b0a114446481e80
-
SHA1
7218b5b49888d9fd511a9a8edc7a9b26cf27a79b
-
SHA256
bd8d6d86bb49b6bd22a03c2c120b947baf797d75abc21044ae4b4d0c92eb2960
-
SHA512
b37cff5a0cc6fbf205f938fb27977562d1e85c23cb09352359d619fdbc692279df5c82f13e0554fc2dd0999465eb840ce92bfb2bfee806861ebe17c8dda88a35
-
SSDEEP
3072:QliPbtrInCOVJwWjpcST/I9MHOrckxXD6h6JI6+eahh/tLRcKTi:QlKtrI39d389vcAXxJI67k/W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b4ece437cdbd18a8b0a114446481e80_JaffaCakes118
Files
-
3b4ece437cdbd18a8b0a114446481e80_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mtw1xelo Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0jvlkv70 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
b19.ywmr Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zx9w1952 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ