Static task
static1
Behavioral task
behavioral1
Sample
4149c770a925f10f701a531191f39601_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4149c770a925f10f701a531191f39601_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4149c770a925f10f701a531191f39601_JaffaCakes118
-
Size
25KB
-
MD5
4149c770a925f10f701a531191f39601
-
SHA1
e3a64347b947326aaa6553100b6983cacdec128e
-
SHA256
2228a3ef024db2b81042f072e61b139c684a3d36c8be487e48589efd2060cc7d
-
SHA512
eb8e5c3305bef768689deb7507a8fc7470d9f4920005f9c54a8e67f39906b6ad7b90c4761ba8292a9ae3f4bc349fb58f6cb43459baffb424021da51268a518d5
-
SSDEEP
384:Dxj0bu3lSPMquDfTYswuIH02Xddbd4hCyC95gpj9zlyMkxavJ5ffL0atVw:Dxwu1UMquDrYOIHhbdiFcgpZ1vJlP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4149c770a925f10f701a531191f39601_JaffaCakes118
Files
-
4149c770a925f10f701a531191f39601_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
gi9yh Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
euyehw Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wb Size: 154B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE