Static task
static1
Behavioral task
behavioral1
Sample
4507b5ba24bc3ba7808412652c22d71d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4507b5ba24bc3ba7808412652c22d71d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4507b5ba24bc3ba7808412652c22d71d_JaffaCakes118
-
Size
296KB
-
MD5
4507b5ba24bc3ba7808412652c22d71d
-
SHA1
5c131c7410be9af73f0ab6c0d439e2f87cbaf322
-
SHA256
b63ac21ebc7fd2c5b2d8a69c6e95a397993bac62edecb93ca0b9af6daa243857
-
SHA512
579b31598213a466488b3c067cb99352602dd3b2d3d65d451b5ada232b54ec3eb75e92194da85143aec6c72a17ec3da85f070e8e8bd3f30fffb992ca55fb8628
-
SSDEEP
6144:bho65EiHODDe1h+mNGDj1ncQK5b+timP71ix5k61zaPyPMf3uRUsbolkINOCQ:yPcOrmNGDZncQKwtLP7gk6tSyPM2T0yx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4507b5ba24bc3ba7808412652c22d71d_JaffaCakes118
Files
-
4507b5ba24bc3ba7808412652c22d71d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 95KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ