Static task
static1
Behavioral task
behavioral1
Sample
d045ca432800ef4a9e7241915fb85120_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d045ca432800ef4a9e7241915fb85120_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d045ca432800ef4a9e7241915fb85120_JaffaCakes118
-
Size
47KB
-
MD5
d045ca432800ef4a9e7241915fb85120
-
SHA1
c376dc7a1406328efa99fa67b57f4092faa62ff3
-
SHA256
ab48683b66e846551f558d2d2531b53ffb3279414971cc32a61fd1c5e317c8ce
-
SHA512
576947fa493dac80294ff2a1c86e6a7e837e8d015e873a5e395b99d65b9fdfe3b8d920d4485093da0976674e2e254e0b4898961664f7877d22b06f18646c0ac2
-
SSDEEP
768:JyL6g0fRwXCZVTGE+r87tCp+7ig1L/NI7+tQ2xTA4WS1SxfeVTq75NIfPElvhtUY:Jy2g0fEC3EUXhL/NIIxYkSReq3IfPExP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d045ca432800ef4a9e7241915fb85120_JaffaCakes118
Files
-
d045ca432800ef4a9e7241915fb85120_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE