Static task
static1
Behavioral task
behavioral1
Sample
d4c5103751cb004fe55f9702ea75d7c7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4c5103751cb004fe55f9702ea75d7c7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d4c5103751cb004fe55f9702ea75d7c7_JaffaCakes118
-
Size
96KB
-
MD5
d4c5103751cb004fe55f9702ea75d7c7
-
SHA1
8acc44d6127015631c88f64d345dc2d041e5e0e2
-
SHA256
9caba400d72e997213e9e1ba9c54387754d6d3f8034042812e0feaf4208acc6b
-
SHA512
fc7ddd19396c2730d558d7e4452914518b2d29d5149b9f1a6abe8ab0dc21c620e335b047878a1b6d77e5ce760b4018e42e6ccb1ff4e44d9189dfe2fc7bc66a65
-
SSDEEP
1536:VNVVfPdVlEc65LqJptYgP2qtXRpeOIQGjTtEkZQX/kxf+CP0pZatFGk:VbVfPdVlb65Lqzt3B0QGC8WMxf+CP0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4c5103751cb004fe55f9702ea75d7c7_JaffaCakes118
Files
-
d4c5103751cb004fe55f9702ea75d7c7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE