Static task
static1
Behavioral task
behavioral1
Sample
a44d78f811dbebcd42ea9c31110ec887_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a44d78f811dbebcd42ea9c31110ec887_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a44d78f811dbebcd42ea9c31110ec887_JaffaCakes118
-
Size
128KB
-
MD5
a44d78f811dbebcd42ea9c31110ec887
-
SHA1
7ff4fdf848bccbd6f47898c74e410afd0faea100
-
SHA256
704c50efaa6e6c3a2b9f0488010184453e6a0c5e85a91b484236c3d5672d96a0
-
SHA512
a0f3a09f1c53b46360b7217bc478315b71607b70f97e5e37954a3ce8ee27fc79e51ecf4efd0987771a9ef15c589931add6f009fd1024aa15e67aaf40de93cc2e
-
SSDEEP
1536:8PKHvT/d5Wb3iqxC/FpXOlx3nZazEBghF+ZuD+2jOQFp:8PKPp5WrQm9msg/+ZuD56A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a44d78f811dbebcd42ea9c31110ec887_JaffaCakes118
Files
-
a44d78f811dbebcd42ea9c31110ec887_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE