Static task
static1
Behavioral task
behavioral1
Sample
47fae9970525af454fe468c7b99c305c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
47fae9970525af454fe468c7b99c305c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
47fae9970525af454fe468c7b99c305c_JaffaCakes118
-
Size
384KB
-
MD5
47fae9970525af454fe468c7b99c305c
-
SHA1
dd88e6d7efd72e47985a4a4638e22c109cf1686a
-
SHA256
59512c770425000344715c545cd9c79962e38e89bc3ab1f98d2529ebf26acd7d
-
SHA512
44b67271525add4e15bf306e2bd30acf8acd0376de4ebc57d084d68be6a7df6c238395a00d77dc2a8c5b3c356d2576de86b6c8baeed9ecc30a1390ae591eea79
-
SSDEEP
6144:O3mUXg7DlhFudkIYx1jGuH/qfSYv1SHywbSWXC50hbP1Cl+fGrZZFUl/qthqbu:/UXgthFuC7xk+3bS4vbtaFHtp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47fae9970525af454fe468c7b99c305c_JaffaCakes118
Files
-
47fae9970525af454fe468c7b99c305c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 845KB - Virtual size: 845KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ