Static task
static1
Behavioral task
behavioral1
Sample
4a579aa816c17d05b726de7080fc75e9_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a579aa816c17d05b726de7080fc75e9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4a579aa816c17d05b726de7080fc75e9_JaffaCakes118
-
Size
93KB
-
MD5
4a579aa816c17d05b726de7080fc75e9
-
SHA1
faa14879351f7ebd164182087ef1747d454b149e
-
SHA256
f765a5af88b140ab25e41fb5c9e9d25899bd576d2fa8dc72f056eb79c6d59b78
-
SHA512
89350a62aa17a0f35c64dbbd38a735f46da0b399b6529184b21475fc776e270fb0036796750be280ce3308fedfe5673fbe8cb440ac05cd00edef2cc065ed176d
-
SSDEEP
768:jvfTPWTqzf0RoZK+Kg5PUhse6hjDHiW/8mvNdShfZg7eeIC0HFKVLXCsukLkHk0d:LvrZK65Pgse6hjbb/FCbFcCrkLkH8F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a579aa816c17d05b726de7080fc75e9_JaffaCakes118
Files
-
4a579aa816c17d05b726de7080fc75e9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE