Static task
static1
Behavioral task
behavioral1
Sample
4b0ab55b1e2d99823c03345e6f4d4359_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b0ab55b1e2d99823c03345e6f4d4359_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4b0ab55b1e2d99823c03345e6f4d4359_JaffaCakes118
-
Size
97KB
-
MD5
4b0ab55b1e2d99823c03345e6f4d4359
-
SHA1
9d75d2d1426123c77d08bdbd2c2d6e6e4c9fb900
-
SHA256
376e9f6d05f8832a4f99b1fb19741e67f278d5417a178e769fb1b5bae914faea
-
SHA512
7ecc1dd144e7291d4f85803972c9a7e864f7528cb6df8832e6a667bc53eaf5b502a9da2676d891e72fafe4887505fe87b4ce607e40c4fc5c1ed3b1f757fb6d6b
-
SSDEEP
3072:z3BlVuG1lnetMNOehBJvIpgkFWhOb2aPNsGEK+V0H:LXcGlnetMNOehBJvIpgkFWhY2ap
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b0ab55b1e2d99823c03345e6f4d4359_JaffaCakes118
Files
-
4b0ab55b1e2d99823c03345e6f4d4359_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
AUTO Size: 284KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 87KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 5KB - Virtual size:
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 3KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ