Static task
static1
Behavioral task
behavioral1
Sample
4cfdd65820b5bb4eebec2fab33455cbd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4cfdd65820b5bb4eebec2fab33455cbd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4cfdd65820b5bb4eebec2fab33455cbd_JaffaCakes118
-
Size
110KB
-
MD5
4cfdd65820b5bb4eebec2fab33455cbd
-
SHA1
e706657227650e58bbe3965f17dc2ba380be9b0f
-
SHA256
7e6db27bca230cdbcf7c63fbedde5e8fa2a15f00c22912ec9e8820361e87f9c5
-
SHA512
1fec5c77145056e39efb610ca113197263676e5b2434de020e1bfd54f14b07b2a3ba04bfd649d08bbbe3a077c4c3ab5982ba1412f8d58f623f892f59663d18df
-
SSDEEP
768:t5eWS1jQ4DCrU8lLJ4JYswOwacxAc2+Tf4v1kQJATetrLAbooR:rNIQ6xiGlXOxA4QAT2+v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cfdd65820b5bb4eebec2fab33455cbd_JaffaCakes118
Files
-
4cfdd65820b5bb4eebec2fab33455cbd_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
hzsg9og Size: 350B - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gb8u Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
obrymdzw Size: 4KB - Virtual size: 733B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE