Static task
static1
Behavioral task
behavioral1
Sample
04353a9a48dcee989f5a7abaf8bd44d4_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
04353a9a48dcee989f5a7abaf8bd44d4_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
04353a9a48dcee989f5a7abaf8bd44d4_JaffaCakes118
-
Size
13KB
-
MD5
04353a9a48dcee989f5a7abaf8bd44d4
-
SHA1
e5eaefaef9c2510cd8c2d01bb723321b207d3066
-
SHA256
09e6fd908b92289c2c9242946e8dc643649521a117f219e9d758b3e81c992888
-
SHA512
d907972d8afdd3b4ded3b4e03b89a864ef7aa7c925b93b9afc0f6e91875fa5d6baf3cb83f9dd4f8b04bfa1134685d7cd68262265881c59b64e23ae087f818d9a
-
SSDEEP
384:5pryfjOArmSvKSyDWQ4bcxah2YrBxamkL/:PyrhrZSJDjrxwjWh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04353a9a48dcee989f5a7abaf8bd44d4_JaffaCakes118
Files
-
04353a9a48dcee989f5a7abaf8bd44d4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE