Static task
static1
Behavioral task
behavioral1
Sample
484948e78bb0e4db483b1c634d4784c8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
484948e78bb0e4db483b1c634d4784c8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
484948e78bb0e4db483b1c634d4784c8_JaffaCakes118
-
Size
25KB
-
MD5
484948e78bb0e4db483b1c634d4784c8
-
SHA1
d496710fee1d7c7fd60a09eadedf03d59a6492c8
-
SHA256
9579866bb0036f812c87290596277907a4e79958b04d975ba62f4c689136697a
-
SHA512
b7933998f0dbff1c7fee63383916532d101305c4c0fd6f87d2621ba0721e3e6ef8ef80d460e99a3bb62300690de5b3b2eecafb79e472a6dfe6de57237e1b7b4c
-
SSDEEP
384:45inD8pFbdBkisxTASHKPbSiow/d9rwDo8d+igU3R17MNIi3P5lye:ZD2kisFAIKPB/dhAo8dhD3R1Di3P5ly
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 484948e78bb0e4db483b1c634d4784c8_JaffaCakes118
Files
-
484948e78bb0e4db483b1c634d4784c8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ecc Size: 234B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE