Static task
static1
Behavioral task
behavioral1
Sample
4b206c9790efdfde63ad15d1bc4a24bd_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b206c9790efdfde63ad15d1bc4a24bd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4b206c9790efdfde63ad15d1bc4a24bd_JaffaCakes118
-
Size
8KB
-
MD5
4b206c9790efdfde63ad15d1bc4a24bd
-
SHA1
9f05111724832f371ccf403f7f2ed1af6ed6cb65
-
SHA256
4d1825a88def1a4cc412a8a3bacf9efc2448c4e29f6f36b94700542062a96a45
-
SHA512
58ce576c9e0d93c5f94ab8f098000569abf0c4f8dc40f018c5c087d259d098bd8a66e4cd551e3fd80eb24bebaee86a5db29943079418cdcb129d78d4112f4438
-
SSDEEP
192:26JjfVUDibpQsf/LAkwujQRnJxQjNxvCWshvka7kgUwzI:fJj9WsfjTwxnLQjrK7hsakt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b206c9790efdfde63ad15d1bc4a24bd_JaffaCakes118
Files
-
4b206c9790efdfde63ad15d1bc4a24bd_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE