Static task
static1
Behavioral task
behavioral1
Sample
42f5e728632ae1176fba4892a464f157_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42f5e728632ae1176fba4892a464f157_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
42f5e728632ae1176fba4892a464f157_JaffaCakes118
-
Size
79KB
-
MD5
42f5e728632ae1176fba4892a464f157
-
SHA1
2be499e1b8c8dfaa510e41f21b37a699c6410400
-
SHA256
d7b9fb011fa0bd44fd7aba914523a0eb453abc4989b9dc1a5d95dbf9a7095f63
-
SHA512
1085a5c218020fc78b2dde181d471b0777b126bfc32bd3b2f8b234c50a3447ba74490e74138bbf756275f41ecc20581c5da9c1a83a2dfcb62e0fdb9dda96b70a
-
SSDEEP
1536:x1vjwxYM2aaQI1blEu3qWTw4uc9qRC781WDqA0pGUWTw4:x1vyYM2FJ31TWZC72WYGDT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42f5e728632ae1176fba4892a464f157_JaffaCakes118
Files
-
42f5e728632ae1176fba4892a464f157_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE