Static task
static1
Behavioral task
behavioral1
Sample
7464c1f8932ffeb7e163b21cdf52f4a8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7464c1f8932ffeb7e163b21cdf52f4a8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
7464c1f8932ffeb7e163b21cdf52f4a8_JaffaCakes118
-
Size
1.4MB
-
MD5
7464c1f8932ffeb7e163b21cdf52f4a8
-
SHA1
9fd3f7a40fdaf1136a29640fc1917a845fec7bf7
-
SHA256
afd0e9a33f044bc244d2c16a53b9c069494c5ebefe59baa7dd4770d621a321e0
-
SHA512
570ab8263654e663b68db3ce07f2b37a95da139552e82673960bdd37c074e7dd6dc305e0e72ec222bf090d5d433ba00492edb34edd5e2f5bad4513023ecaea28
-
SSDEEP
24576:wBDehvWR0PrQilrOJXSdxbWUeDT3Ryn2Q69KUD5pfRPy3aFvgNdGp:xvLDQbXHUezRUUJ5RRPvr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7464c1f8932ffeb7e163b21cdf52f4a8_JaffaCakes118
Files
-
7464c1f8932ffeb7e163b21cdf52f4a8_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 146KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE