Static task
static1
Behavioral task
behavioral1
Sample
3f6dc34dcce764d43524b08084826aaa_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3f6dc34dcce764d43524b08084826aaa_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3f6dc34dcce764d43524b08084826aaa_JaffaCakes118
-
Size
124KB
-
MD5
3f6dc34dcce764d43524b08084826aaa
-
SHA1
730e0459e49d8b60c9e9fd346d10cba2ae83be30
-
SHA256
43586b45be1c20028bd9c28d98a775a4d390e94450b3eacc193be18a91430b8b
-
SHA512
aa7444617241ec9881d807841566b90d8d4ef702084efb56f50019deffefd1eeb5cca38428a5661f53fca2cbe9d34a108fe7ead947dd5d1e22093f8b6f3c3d96
-
SSDEEP
1536:ci+3hpGgRS5Jy11W2GJ6R/nJgVaY756dQZ2IM:cz3hpUqfEQ/nJY756Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f6dc34dcce764d43524b08084826aaa_JaffaCakes118
Files
-
3f6dc34dcce764d43524b08084826aaa_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE