Static task
static1
Behavioral task
behavioral1
Sample
4a399c5ce9ea6bdc00793bd22f7f215d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a399c5ce9ea6bdc00793bd22f7f215d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4a399c5ce9ea6bdc00793bd22f7f215d_JaffaCakes118
-
Size
3.5MB
-
MD5
4a399c5ce9ea6bdc00793bd22f7f215d
-
SHA1
93bfd39505f1fb1169f52720b109293c3fec9155
-
SHA256
d42dfd197ba4e3579727bbfd571dbca126127b3d6bbbcdc87e8f47959d8a65d0
-
SHA512
ce3fed42c950145436ff59fa286ca65ddc32414b34369ffe65f8e0c4ec9d49922b879499ec0beba03648fc1dd6377f3b615bfbe7eb549d4cfb4d456d87b09af0
-
SSDEEP
6144:jS44foZq13DauhJMCvLZSNsu8xEHLdxxNQBz:W1uq3AeZSvtrdLN2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a399c5ce9ea6bdc00793bd22f7f215d_JaffaCakes118
Files
-
4a399c5ce9ea6bdc00793bd22f7f215d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ