start
Static task
static1
Behavioral task
behavioral1
Sample
48f18adfc8305cd6cf1573088bcb92be_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48f18adfc8305cd6cf1573088bcb92be_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
48f18adfc8305cd6cf1573088bcb92be_JaffaCakes118
-
Size
120KB
-
MD5
48f18adfc8305cd6cf1573088bcb92be
-
SHA1
c2bbb206649502543552a58e1ba9b13085457d3c
-
SHA256
4182c077fb44e1aeaab5f3cca965a6866d71ea9147fd6a31c783859e1c298b09
-
SHA512
1ee0023713de3e1c1065ca24e135d664d938170f6e64ef210a16eb0dd504142278a0536a1c245175f4f639aa743880ed3df23ad53077c800e256a71941143222
-
SSDEEP
3072:hsmas+e3bcyNw5yZ8wpUmMD8S0DmxyEZT/wVC4K:99LwcZ8wpUmM4S0DgyE9/AK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48f18adfc8305cd6cf1573088bcb92be_JaffaCakes118
Files
-
48f18adfc8305cd6cf1573088bcb92be_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 115KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE