Static task
static1
Behavioral task
behavioral1
Sample
4149fd9ace91274a9f47fe38a7a77d33_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4149fd9ace91274a9f47fe38a7a77d33_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4149fd9ace91274a9f47fe38a7a77d33_JaffaCakes118
-
Size
14KB
-
MD5
4149fd9ace91274a9f47fe38a7a77d33
-
SHA1
a7bcde36ad437aabe9d38e07ce8e0163a2483d4d
-
SHA256
ca10cbdf1e0e433c27b84d8f04d6e7de95f7facf0f65648b6a88e1d34563a5e0
-
SHA512
588aa98e88bce8b4369d57c83c651524cff0d5671659416650e23cf3ef1f9eac92965c402a1770e9c2bef094017698ed1082627878a35b98f82146aa1a11d218
-
SSDEEP
384:gjQBiFHqBRRII+AtpY3TjJduAoqMYZe3Lxds9hRLP:qK72rqETK6e3Lmhh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4149fd9ace91274a9f47fe38a7a77d33_JaffaCakes118
Files
-
4149fd9ace91274a9f47fe38a7a77d33_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE