Static task
static1
Behavioral task
behavioral1
Sample
4403f7d41cf1b7b2ca5ee8a951a6c3e0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4403f7d41cf1b7b2ca5ee8a951a6c3e0_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
4403f7d41cf1b7b2ca5ee8a951a6c3e0_JaffaCakes118
-
Size
55KB
-
MD5
4403f7d41cf1b7b2ca5ee8a951a6c3e0
-
SHA1
08c672db824c0c615e3002918e8f80257e7e7dda
-
SHA256
ab7ab5f4a2cbbf3e89d5e0f3aa1378e39ee390313ef8c811b4fa1148e92520b8
-
SHA512
279ab6befad4cfd999ad60adb1ecca3f404520059ccedf46152a1d87b22511ccacc892da8686b514d90f58cd7b2556dcddc18849dce068a9a2588fcf2c03cffb
-
SSDEEP
768:hyj1BRDhLaVl1AoZrA3h8U3Kq2NJGL18ePOS4u6Id9vWpYpwboOq:hoLRNav1AoI82KqfO6OpBId9vAYWboO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4403f7d41cf1b7b2ca5ee8a951a6c3e0_JaffaCakes118
Files
-
4403f7d41cf1b7b2ca5ee8a951a6c3e0_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.QQDDA Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������� Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 11KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ