Static task
static1
Behavioral task
behavioral1
Sample
4ac81e2efa22d00c6a363f9f69b2b45a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4ac81e2efa22d00c6a363f9f69b2b45a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4ac81e2efa22d00c6a363f9f69b2b45a_JaffaCakes118
-
Size
535KB
-
MD5
4ac81e2efa22d00c6a363f9f69b2b45a
-
SHA1
34bdc904cf8ed386ddc04a9f1b5a867a8770befc
-
SHA256
8052a0c1bfde288a3a6e33c2cd9360926e5871c7ee394f9dfe9b402de69a1e1a
-
SHA512
3f831cc66953c131fa49b44ffacb94b8a144670327ac23f39c9d90286015edb5a9606727e06fcd9e5ee43dbcc67bf0d806170346859d291bfb929f3fb43a7207
-
SSDEEP
12288:w8l03m6bz3f2Dds+AAMyLrJJEyRwCdSwQjap4lT:w8OHuRs+tLrUyRwCKjay1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ac81e2efa22d00c6a363f9f69b2b45a_JaffaCakes118
Files
-
4ac81e2efa22d00c6a363f9f69b2b45a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: - Virtual size: 948KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 534KB - Virtual size: 551KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE