Static task
static1
Behavioral task
behavioral1
Sample
d40b3faa47eeceba524c5e203ce937d5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d40b3faa47eeceba524c5e203ce937d5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d40b3faa47eeceba524c5e203ce937d5_JaffaCakes118
-
Size
15KB
-
MD5
d40b3faa47eeceba524c5e203ce937d5
-
SHA1
479533642c2dfa3cc0a16883135ed59580e39645
-
SHA256
6072286ef4cb3f5253d35d49ecbda445edb012398b0382c48328d13553b376e2
-
SHA512
503c6fbbc17f56dc59d5409965958282f093b9ba2c9a1a37164b71d24279975364ada78a40e28dc9216ccc0862af4cd8a6e5761831df3e85169a91fd83e74148
-
SSDEEP
384:bMCM/lm39+nGG47H+JoVa24KfbeeO+i12wS67avFRoSV0WRVUNygPs0dF7MQP4/z:nHwO2jMMJmnhp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d40b3faa47eeceba524c5e203ce937d5_JaffaCakes118
Files
-
d40b3faa47eeceba524c5e203ce937d5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 756B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ