Static task
static1
Behavioral task
behavioral1
Sample
e72f5a81e7555c35b8d7db39cea14c88_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e72f5a81e7555c35b8d7db39cea14c88_JaffaCakes118.dll
Resource
win10v2004-20231215-en
General
-
Target
e72f5a81e7555c35b8d7db39cea14c88_JaffaCakes118
-
Size
11KB
-
MD5
e72f5a81e7555c35b8d7db39cea14c88
-
SHA1
71fa9e98663b326db8829894a10e0992258adfe4
-
SHA256
54debd5d3c1d54aff828fc9bc7da29aceb37ab6a31583f878643638052b126ce
-
SHA512
1d1377eb49a4799cf91e2ed5dd86550002f4e0718ddbfb265bba63cf761dee50e0369982b0537e235f728e6cc954271274ec7c7f7d045b122e7af5c365425225
-
SSDEEP
192:B7+lhcnERDeqpL7I+S7yJzh7bn/YvOJIQpJZ6/i1BHOq3iXkgUw9/lb:EEnERDeqZMyJzh7b/YviIWJZ6a1Buq3e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e72f5a81e7555c35b8d7db39cea14c88_JaffaCakes118
Files
-
e72f5a81e7555c35b8d7db39cea14c88_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE