Static task
static1
Behavioral task
behavioral1
Sample
44d69ae349c1a59a4654c2d26bbe8ca0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44d69ae349c1a59a4654c2d26bbe8ca0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
44d69ae349c1a59a4654c2d26bbe8ca0_JaffaCakes118
-
Size
29KB
-
MD5
44d69ae349c1a59a4654c2d26bbe8ca0
-
SHA1
55605ccec9add9306cf2f58267d2ecee7ac1fa9b
-
SHA256
68c8f60423bb3be15e6ea02c1f60f0b71cb5b4ea256ff3e6c7ff1dfa4a09a55b
-
SHA512
e161ea7fb0ed421c97b09b4fa9a7ffcec3fbbdd7ebd9ab329c40451ff787487359b0690e36aba4d467d132e9aa976bb6f8f8beb79f74da1c9d4003aa8004af24
-
SSDEEP
768:mEf5HS2Lnxm6GodsFeuBwzD9AtxBf887PlDcgxp9j1U9rC:mEs2Lnxm6Gomg4YAts8BAy9q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44d69ae349c1a59a4654c2d26bbe8ca0_JaffaCakes118
Files
-
44d69ae349c1a59a4654c2d26bbe8ca0_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
t Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w2 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2dkn Size: 541B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE