Static task
static1
Behavioral task
behavioral1
Sample
492c675b12945fba6e1c580985884e3b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
492c675b12945fba6e1c580985884e3b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
492c675b12945fba6e1c580985884e3b_JaffaCakes118
-
Size
100KB
-
MD5
492c675b12945fba6e1c580985884e3b
-
SHA1
875438404a84b87d71c7fc3e55a066f22b35ad89
-
SHA256
c01557ab82dd29b94797619f3026fa704039e466265168fa38689009b70c8250
-
SHA512
fc3f11901c4bb31bba6c23d21a59ae302140b9d7c034556a09cd4dc1cb4776744aa7dfde2fd221549490d467e34e38b660b1d5c49c9ee3cbf2e8a9ca552d438a
-
SSDEEP
1536:TNCWyiM2Q5af9q8oe+sFOhinO9hXm76LosckhQFcRRiqOAv8pet4A:ZfkX5afA8o1kkpMOLochQFcROp1A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 492c675b12945fba6e1c580985884e3b_JaffaCakes118
Files
-
492c675b12945fba6e1c580985884e3b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ