Start
Static task
static1
Behavioral task
behavioral1
Sample
47fa93b16b57733ef43b9c166fd648b5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47fa93b16b57733ef43b9c166fd648b5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
47fa93b16b57733ef43b9c166fd648b5_JaffaCakes118
-
Size
11KB
-
MD5
47fa93b16b57733ef43b9c166fd648b5
-
SHA1
af5e05cb3531c22fdffda195ac420f179495f6e1
-
SHA256
3b4d14c0ceba91d38007f6ab8affc20ddbef11ce8524847b0bb4d7c4df7e2acb
-
SHA512
67c672f8892b5d19d16bb17efb2b6c1e6289b7daa686abbaa0bf61338272f64ed773a28f63e6b559b68a182b0abd8e9081d731527b0445fb1e5bb8edba63a237
-
SSDEEP
192:WCxdkQ1uN5rFBc0C705WtEfkWx3i633VphmHVHuHdxl7W5e6X6cMn19Zqd00kgUZ:We7ANzw7oXfkjHVm56X611rw0LZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47fa93b16b57733ef43b9c166fd648b5_JaffaCakes118
Files
-
47fa93b16b57733ef43b9c166fd648b5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE