Static task
static1
Behavioral task
behavioral1
Sample
04c8c10aee34bb08d08e716917892dc4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04c8c10aee34bb08d08e716917892dc4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
04c8c10aee34bb08d08e716917892dc4_JaffaCakes118
-
Size
70KB
-
MD5
04c8c10aee34bb08d08e716917892dc4
-
SHA1
82484fbfe5066a0ac7924df94cf872d54e1d26ed
-
SHA256
e064a743b9a74b4677571464b470f5ae67d923460e6d91a8b30be7adfd8ff39a
-
SHA512
c94bd3313b0cd135d8726624383bfbf217a0f050677fdb77db063750b079b8ce1928f40802754285f82971625eb23a7c38c0ffcc4d44a7a6feaf5ebd03f9bac9
-
SSDEEP
768:V8BmgjBk+3KKx/md4cmaWBLMBOVjk4CcXM4O51f6FCvzy7vyP5meotJA:yhgu/rcqNx845CLy7K47JA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04c8c10aee34bb08d08e716917892dc4_JaffaCakes118
Files
-
04c8c10aee34bb08d08e716917892dc4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
u Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uxm Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wu4om9 Size: 630B - Virtual size: 413B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE