Static task
static1
Behavioral task
behavioral1
Sample
04836442b1550ab18be3c4bacb52945a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04836442b1550ab18be3c4bacb52945a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
04836442b1550ab18be3c4bacb52945a_JaffaCakes118
-
Size
49KB
-
MD5
04836442b1550ab18be3c4bacb52945a
-
SHA1
0bb90f2bf3aec1456517fa9731a432e0dfda2a0c
-
SHA256
bac1d3888cc96f0af12081616cab2cd829320a070bf182ee6d70e1d151c4e064
-
SHA512
2c22a7bdd91a0ac953758c4592598c7901fd0e725014b02476924baef8da02d162a5aa05a9bf7204263d5b965e3d810e300c67b02a9f34bfe257b288e2e3b041
-
SSDEEP
1536:Qxe7HM0ibg07yeFJkUA4K1Y8HrkrRgX9rLX:QMrUbNFJkFY3WX9/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04836442b1550ab18be3c4bacb52945a_JaffaCakes118
Files
-
04836442b1550ab18be3c4bacb52945a_JaffaCakes118.dll windows:4 windows x86 arch:x86
a56f115ee5ef2625bd949acaeec66b76
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
Sections
.data Size: 42KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE