Static task
static1
Behavioral task
behavioral1
Sample
c1c43dd15e2e4bb442524b249dd3bd7d_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c1c43dd15e2e4bb442524b249dd3bd7d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c1c43dd15e2e4bb442524b249dd3bd7d_JaffaCakes118
-
Size
46KB
-
MD5
c1c43dd15e2e4bb442524b249dd3bd7d
-
SHA1
3436870bd32a9b3cb1ed10577f421820df46ccd6
-
SHA256
fe8715acd3f1ca258553204aeb999b031772a78d881693b03cf632d4ec9cf21d
-
SHA512
9b18e189b5521b46053f96e1c56f5e5efa367a5ee9bb72d849bc8ebd4e6d610b5fc005d13cc95663e27ca0d191860bfe88c69488c7b367782065126cf8f98939
-
SSDEEP
768:OSnMqulszKi4X7Q/UT6pV6SJ7yvl0kN7J2uG3GndSYZAjnyTAwbk:ZnMquls2iCTK3JW9fG2g+k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1c43dd15e2e4bb442524b249dd3bd7d_JaffaCakes118
Files
-
c1c43dd15e2e4bb442524b249dd3bd7d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ