Static task
static1
Behavioral task
behavioral1
Sample
3ecdd50177bb4c6d871c08663b9e6d46_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3ecdd50177bb4c6d871c08663b9e6d46_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3ecdd50177bb4c6d871c08663b9e6d46_JaffaCakes118
-
Size
298KB
-
MD5
3ecdd50177bb4c6d871c08663b9e6d46
-
SHA1
939ed91547b3ff350910ffa211bb6800604225c4
-
SHA256
ec6248ac7bfc853c68a1ecc8c4b7fae204c9138aff61b6798f9a2c9790d7584a
-
SHA512
ea4b1f867eef65eee83ea446afca87d62ab8b73f0de6d14a70cc800b319a6ee902040328347ff8603cf988753d4615b0b506c19ec148e58cdea0849d78f19c25
-
SSDEEP
384:jPFmlPEm8BQXJ6WDE8vQWiZK2vD07VKYWO1A42Zvs6C9Sk:jPwj8BmDvyK247lO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ecdd50177bb4c6d871c08663b9e6d46_JaffaCakes118
Files
-
3ecdd50177bb4c6d871c08663b9e6d46_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.ddos0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddos1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddos2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE