Static task
static1
Behavioral task
behavioral1
Sample
42e3ea4ad61cb48090189802fdc0473b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42e3ea4ad61cb48090189802fdc0473b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
42e3ea4ad61cb48090189802fdc0473b_JaffaCakes118
-
Size
32KB
-
MD5
42e3ea4ad61cb48090189802fdc0473b
-
SHA1
546e12563c7f0cb94ee79c6b24b21c3a153f48ba
-
SHA256
45aaea87dbdb527511f4f289ccb8adcdf1007acbec2dcc37db40ffdc23c9632f
-
SHA512
c6080b340b33d5a9d8370b87f373ffe579892bd13fb1832c2cb48dcda441a10de77acbc8a36a0c254107604349393fdf931225d1164745fb3d1f3f94d5be180a
-
SSDEEP
192:Ng4v9FL2L9wx1KLWUZuNvQPTlXzEpVlULScCIx0MT8DGd2WfEJGI:Zv9FqLKwfcvQPpXIVlNcCe0MT3d2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42e3ea4ad61cb48090189802fdc0473b_JaffaCakes118
Files
-
42e3ea4ad61cb48090189802fdc0473b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
0070 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0071 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0072 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE