Static task
static1
Behavioral task
behavioral1
Sample
f490e0c44d15b1e8a940b0c4e7d77318_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f490e0c44d15b1e8a940b0c4e7d77318_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f490e0c44d15b1e8a940b0c4e7d77318_JaffaCakes118
-
Size
108KB
-
MD5
f490e0c44d15b1e8a940b0c4e7d77318
-
SHA1
eb48511287d090a9f2ae0f1438e402fb21e30180
-
SHA256
5e9de049e3069ee5e7ac5a25c5d932d07deebace36cdfdc533e04a878e5bd5d4
-
SHA512
3a1116f6e55b999168c949088187b243f0303a0e64868e89068e4edf32d83c9062cfd34b3356f289fd08aab08a0d67b572ea9ae721ac29b6ba949b179a72244c
-
SSDEEP
1536:3LDBjBedOpRKbvs6siBAwFSFEAwj2acTazv/Ws6s:idOwjCwBH15rk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f490e0c44d15b1e8a940b0c4e7d77318_JaffaCakes118
Files
-
f490e0c44d15b1e8a940b0c4e7d77318_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
wa Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
co Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8muo9hl Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE