Static task
static1
Behavioral task
behavioral1
Sample
944e4f41045636d629266a6e1c5ada38_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
944e4f41045636d629266a6e1c5ada38_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
944e4f41045636d629266a6e1c5ada38_JaffaCakes118
-
Size
134KB
-
MD5
944e4f41045636d629266a6e1c5ada38
-
SHA1
e10b7a5d94a004d809c0cbff83bfd8b3b96f1d12
-
SHA256
ce65f565bd5931e3f6207ea13dd7653fd221c5f980e74d67c6b8e70d510b4056
-
SHA512
c3bb4db90dda01509487aadc70966f4780ae7aa656c364b2907197c36d6ea11727abcedfaff41c6d19a82333e57ffc6ee53131a81527039271f03c27676b7872
-
SSDEEP
1536:XfLiPJg9/dOMQGmE35VELqrHuSBJi128shv+bDr35V:XfLKJg9/drQGmHLqrOS7i128j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 944e4f41045636d629266a6e1c5ada38_JaffaCakes118
Files
-
944e4f41045636d629266a6e1c5ada38_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
uk48hi Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g5 Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tf4icbo Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE