Static task
static1
Behavioral task
behavioral1
Sample
4b3a82d10bc61ba849128400a1cdff06_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b3a82d10bc61ba849128400a1cdff06_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4b3a82d10bc61ba849128400a1cdff06_JaffaCakes118
-
Size
36KB
-
MD5
4b3a82d10bc61ba849128400a1cdff06
-
SHA1
3d2d4bf49c8d584b103355a78baae1111f385d44
-
SHA256
c09deaa863c954dd3feb430b2816cf8c5ed1bf95a5ff214ead20d8baac985fa2
-
SHA512
417f775e111248c1d88340b6bf1c6e57716666a06eb098778dd5fda23aefb6cbc295d0a81a8a67f3b0e7c5a8e29f381260d2a10d3ead32d546ce866627ec70c7
-
SSDEEP
768:Daz4dZT4U7gRRjh56KF6NUu7l7Q7iAEXEjEo3cGfGv2s+QYZLjS4x7tuw/0:c4dZ77sluKgUKnJXEwyG/YLjSWv/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b3a82d10bc61ba849128400a1cdff06_JaffaCakes118
Files
-
4b3a82d10bc61ba849128400a1cdff06_JaffaCakes118.dll windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE