Static task
static1
Behavioral task
behavioral1
Sample
f39ed4922db5a0017a02f0dadfaac20a_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f39ed4922db5a0017a02f0dadfaac20a_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f39ed4922db5a0017a02f0dadfaac20a_JaffaCakes118
-
Size
46KB
-
MD5
f39ed4922db5a0017a02f0dadfaac20a
-
SHA1
4020009a021a2544323a98bcdf1818489b1c58aa
-
SHA256
3d5d208009f02c569e362004263bb5fdf03431a264b6b12a77aac45a1963e627
-
SHA512
2925869a5daf2bd18eff09ddf58a06e8d5bb08b5ad4f6a84a1c8bddfa1e2e584986ce4291d046044fa98dc5f25b7d55409612a34e1ab2af21739161e25fa9da9
-
SSDEEP
768:kLQ0RCXpQwqRnTuOLZ2XL6J5H2+3VmcZxhEHtlnLVdXZQMYBqjLy10MsZ8f:kvRC5Qw0TumIXL6Pr3RzhEHtZLyDBWLB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f39ed4922db5a0017a02f0dadfaac20a_JaffaCakes118
Files
-
f39ed4922db5a0017a02f0dadfaac20a_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ