Static task
static1
Behavioral task
behavioral1
Sample
42cbb07e5245b21d9d349e17b224efc8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42cbb07e5245b21d9d349e17b224efc8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
42cbb07e5245b21d9d349e17b224efc8_JaffaCakes118
-
Size
37KB
-
MD5
42cbb07e5245b21d9d349e17b224efc8
-
SHA1
3aa1725cae25bdeba4fcafb7cec4b1f2830f4e51
-
SHA256
934ae7344a4ecefe9f0e154185f0650b59741415ca822d42f96da29d9824a78f
-
SHA512
ecd02c90e310e94aa9f23135fad248ff5a87d962c0c71b5e6ebe86c4bc9e9865c6e0edf87b9460bb81377e83a4e795e6bc9c634c3d54f5df03a5a2453b9fef05
-
SSDEEP
768:38XScD1GgWStNQJVlwsT9WTqoc3a8qJzNF:sSm1GgNoCKWokRF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42cbb07e5245b21d9d349e17b224efc8_JaffaCakes118
Files
-
42cbb07e5245b21d9d349e17b224efc8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ