Static task
static1
Behavioral task
behavioral1
Sample
42f6b5b149e9e2f73dd692e50e9829b4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42f6b5b149e9e2f73dd692e50e9829b4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
42f6b5b149e9e2f73dd692e50e9829b4_JaffaCakes118
-
Size
308KB
-
MD5
42f6b5b149e9e2f73dd692e50e9829b4
-
SHA1
7b4daa2bc98501a2eed7ac6b03d39f909d1bf8d2
-
SHA256
8539b0fe80ad0f4f9a2db3c23afa6d9a4ebf1ace450a371f70b5cedbb69bedec
-
SHA512
386b139a0343149a5e89b6e5db4e8632ef582cdbe007d9096258ce55d31eb77a98d9a763af6f09ead5c13baccfeee51cd3d272bd56f311e639ccb2b82920e008
-
SSDEEP
6144:NjG/8OFwfl/Qebuav9yJ3pCCF6r3b+niFYXsuSOiM+sb3ilhO06ANlswgJ:N6/8zfl/QePv9yJcCYb+iAsXMd3ilNDi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42f6b5b149e9e2f73dd692e50e9829b4_JaffaCakes118
Files
-
42f6b5b149e9e2f73dd692e50e9829b4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 295KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE