Static task
static1
Behavioral task
behavioral1
Sample
4493c9fba06da3c192ab81e05f07f150_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4493c9fba06da3c192ab81e05f07f150_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
4493c9fba06da3c192ab81e05f07f150_JaffaCakes118
-
Size
473KB
-
MD5
4493c9fba06da3c192ab81e05f07f150
-
SHA1
0c320cd05a139caaf44461eda9553554da8fd460
-
SHA256
ab90264164c11b4e50821ecdceec3d5f44a1f107f72620fea52c62ae9df33b1e
-
SHA512
9c493778961361aa8e125f95ec6f9497069729a6d491ce6048996aff747dd2bcfe3693684609e01ebaef5034add0b044a43e43e20a1276a9159651ecb64abfad
-
SSDEEP
12288:8t7O1XMVfW5dJ6KEIHcnF123ZAwWpgajWiDEmo/:YO6cH6KEI8iZA7pgKWj/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4493c9fba06da3c192ab81e05f07f150_JaffaCakes118
Files
-
4493c9fba06da3c192ab81e05f07f150_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 242KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 87B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE