Static task
static1
Behavioral task
behavioral1
Sample
4678ce4691f19e9649e655ac15b28473_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4678ce4691f19e9649e655ac15b28473_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4678ce4691f19e9649e655ac15b28473_JaffaCakes118
-
Size
326KB
-
MD5
4678ce4691f19e9649e655ac15b28473
-
SHA1
053bf335c408ffc2c0991e372ba4f5322967f16a
-
SHA256
20081e5db9b4e85c481b272909bd20492dd1e5653c15f524522d936cec16ccfa
-
SHA512
4edf2b6c80721226075416d018f58a5b561dd8e346cc368a336d8f75ed6134d6fa6de0a02020a4892341f6810e7e00e137a449e82d7f13bda145ad9bd5507139
-
SSDEEP
6144:MBMPY8ENHn7l17d0s7q8VKtcUVX8nIxQfWkGANb8tFJz:u7R9d0sW8gtTVX8nIxQfWk/Nmb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4678ce4691f19e9649e655ac15b28473_JaffaCakes118
Files
-
4678ce4691f19e9649e655ac15b28473_JaffaCakes118.dll windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE