Static task
static1
Behavioral task
behavioral1
Sample
640399ae98caddfa463aeb2a3d4cbbb8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
640399ae98caddfa463aeb2a3d4cbbb8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
640399ae98caddfa463aeb2a3d4cbbb8_JaffaCakes118
-
Size
32KB
-
MD5
640399ae98caddfa463aeb2a3d4cbbb8
-
SHA1
54bfa0209cc485bca0bdf49148d2f910549f640b
-
SHA256
42eca3a7aad2828aca45a2ec88de7dfc9f73ea684d89821b568a2e79cdb0e1ff
-
SHA512
095f3dca1128fe84a4d9f07f7247659e21cb4e23dae09404994effa6de15dce37b50f1b08ec1b1328378c24f3e3d36c720c41303b1bdf9ea9ea07be18c8a1be7
-
SSDEEP
768:QsAx8N4Zw7y4xUXxx4i0+pGnAiIyU/0cXt1jvr94grFzZK+:QsuZE5aX7E+QnAMod9vDh4+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 640399ae98caddfa463aeb2a3d4cbbb8_JaffaCakes118
Files
-
640399ae98caddfa463aeb2a3d4cbbb8_JaffaCakes118.dll windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ