Static task
static1
Behavioral task
behavioral1
Sample
48eed40e19ec93c596aed62d13d9e50f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48eed40e19ec93c596aed62d13d9e50f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
48eed40e19ec93c596aed62d13d9e50f_JaffaCakes118
-
Size
64KB
-
MD5
48eed40e19ec93c596aed62d13d9e50f
-
SHA1
81be2848f51e48f4e9cf3772975872a90a745de9
-
SHA256
548ed4998ca0afd823b14a8584e0ad808f3c229013297f906f92c95b52cf5c3e
-
SHA512
8b8ee51553c973ba06b6aa7b1a06832b95f3c86be71417cac1ad3b139e7e3cd391931933dbe2d1b16b12b26ca834f72ade6f88ab873c807b38506c78eadfe785
-
SSDEEP
384:grjD4jHWfJn41CWBty8YcUtTR/+tvNkXUu90OYMyzMEKwYWbTpbJ:grf4LCWBt7Ut1/OGUumz4wfNbJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48eed40e19ec93c596aed62d13d9e50f_JaffaCakes118
Files
-
48eed40e19ec93c596aed62d13d9e50f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE