Static task
static1
Behavioral task
behavioral1
Sample
3e0789d24edf5051072e7617b2873dba_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3e0789d24edf5051072e7617b2873dba_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3e0789d24edf5051072e7617b2873dba_JaffaCakes118
-
Size
40KB
-
MD5
3e0789d24edf5051072e7617b2873dba
-
SHA1
1999f42a522682576965cc75f1814a944a9d7db5
-
SHA256
ee919742a43ce94f1fc6c1799268020f185d6f00bd58fdca50f7974b626ff180
-
SHA512
ff4db5750d10e70cd855d28407e621d7dc18cd8217735f70f11b5aa788a72bde97cdf31fd3c0b798bbdffae1fc5ad9b94af6c75a7401adb194590a661af7cda1
-
SSDEEP
768:ZFF2nWcIk2/FWoq8KuPaar1AxS6cbCyCvaYk1nhNbDnAo9MMZxN:ZIs/FJKuPV1AxSSalDnRHj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e0789d24edf5051072e7617b2873dba_JaffaCakes118
Files
-
3e0789d24edf5051072e7617b2873dba_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE