Static task
static1
Behavioral task
behavioral1
Sample
fd47223df435aa19d453f68c6b379bfb_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd47223df435aa19d453f68c6b379bfb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fd47223df435aa19d453f68c6b379bfb_JaffaCakes118
-
Size
50KB
-
MD5
fd47223df435aa19d453f68c6b379bfb
-
SHA1
29146453b64aeab34b4dd787f9624eba158dd49b
-
SHA256
96512daded8c52f943f5cd06f501d54bffb2808af6eebc22f7135ee2f89f948f
-
SHA512
fc8a164bcf67a1ddb03aa92f058c10e644a7615d532544c78041e986ccbf2e79b2e51af56f4570a9314f3baae5530540a05486b06c48eacc065b9c75c85bee3c
-
SSDEEP
1536:gWUj3ZsqSDI+AK3EuICQFGcc+ZOpI4HYIk3:gFj3ZlDw3EuIRIccNpIGk3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd47223df435aa19d453f68c6b379bfb_JaffaCakes118
Files
-
fd47223df435aa19d453f68c6b379bfb_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE