Static task
static1
Behavioral task
behavioral1
Sample
e73cf8f91a2b390bae4e01d2f6938e2f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e73cf8f91a2b390bae4e01d2f6938e2f_JaffaCakes118.dll
Resource
win10v2004-20231215-en
General
-
Target
e73cf8f91a2b390bae4e01d2f6938e2f_JaffaCakes118
-
Size
84KB
-
MD5
e73cf8f91a2b390bae4e01d2f6938e2f
-
SHA1
36c8c470258abf743bc885dacbe17aed8e7cfa6d
-
SHA256
ee198baf33eef4a0dc764fe9e29de09f55110128231b531407fea2aadb9dafc5
-
SHA512
11a291ca81bfa1a3fbb5d2f555849f5cf82a1633a4accb071108325d2279606ef811887036c32fac953f5f5b85f06edd8759c23b1e6aeb3454c1a70dc57a9834
-
SSDEEP
1536:5YmTSHoRjFWxw5DhnaQbts9+QuUPjCBlWiR2HB0+Q:WUR5DpJtsUamX7RU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e73cf8f91a2b390bae4e01d2f6938e2f_JaffaCakes118
Files
-
e73cf8f91a2b390bae4e01d2f6938e2f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
gn Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
28 Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
929gr Size: 4KB - Virtual size: 557B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE