Static task
static1
Behavioral task
behavioral1
Sample
147528f9acf313e68d7f88a461aad071_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
147528f9acf313e68d7f88a461aad071_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
147528f9acf313e68d7f88a461aad071_JaffaCakes118
-
Size
33KB
-
MD5
147528f9acf313e68d7f88a461aad071
-
SHA1
3a0a553ccdc126088938eb83f474b2ad61490e70
-
SHA256
7c35e50fddb9d9752f62d39fe7578a23de127ed2c2681d7b83cc5df10493e8ad
-
SHA512
f520947d4cda81f2a70883e59ef3ec2e2b08c550f415cc071af60c6881ffe4e534c731ab4a29c30006a832a9805ff1c7ff86b82cf4fc6c328513f03fbfd2f48f
-
SSDEEP
768:KqZlcJf/ZHQeEWBmsyyl9v9DaJB2D8jrQCi0k8En:KqZlcJfRHiWBcayGw8Ci09q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 147528f9acf313e68d7f88a461aad071_JaffaCakes118
Files
-
147528f9acf313e68d7f88a461aad071_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ