Static task
static1
Behavioral task
behavioral1
Sample
040ca75a3b59380ecd2e6dac6f6e9c86_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
040ca75a3b59380ecd2e6dac6f6e9c86_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
040ca75a3b59380ecd2e6dac6f6e9c86_JaffaCakes118
-
Size
1.7MB
-
MD5
040ca75a3b59380ecd2e6dac6f6e9c86
-
SHA1
fc0744ba03f4da8cc93a90c3ab7c9e5bb42c1eae
-
SHA256
1dbbe9b0e6a3c7cbeb3ea9a38730de8d728c81857e29f192a80e5d23dfe35900
-
SHA512
6e189f3bd544b9d06b2b8ab2e38547a3f253b16df5cf5d9dec019378e6885f5055fae084b114a3192b43cfdde962c01e65cffea010e441c8aa6b48297aa2a213
-
SSDEEP
12288:fcMajqU7VSUxlm4zmSj5QiUwo4qsy1+T//2TnsGF:fcMaj1VXxlm4zBj5QiUwMsO+TuTnJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 040ca75a3b59380ecd2e6dac6f6e9c86_JaffaCakes118
Files
-
040ca75a3b59380ecd2e6dac6f6e9c86_JaffaCakes118.dll windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 447KB - Virtual size: 446KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ