Static task
static1
Behavioral task
behavioral1
Sample
459ae636e5d366e4c768025754addf0f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
459ae636e5d366e4c768025754addf0f_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
459ae636e5d366e4c768025754addf0f_JaffaCakes118
-
Size
60KB
-
MD5
459ae636e5d366e4c768025754addf0f
-
SHA1
aab1de0748e485a12cf5220ec0c7e48beec336a9
-
SHA256
454d4240006a2a8fd8485967c3d9e3bfde17fc47b64aa45ac0f15bd2251790eb
-
SHA512
bcf91e39b790cf8ae2d315e53abc4b2d8590f45bab6d2e1b8abc9e56a8ad83310d08953a2145eb117d776d2b44a89a896d5691aba94563509706410a3268291b
-
SSDEEP
1536:ARKJK4iRK+viGjogyMiXc+eNaFSQ58wUsk8tG:JM0Ng7i7wOSQ5Y58t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 459ae636e5d366e4c768025754addf0f_JaffaCakes118
Files
-
459ae636e5d366e4c768025754addf0f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ