Static task
static1
Behavioral task
behavioral1
Sample
e774cd5395420d32d42a12e37a1e7346_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e774cd5395420d32d42a12e37a1e7346_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e774cd5395420d32d42a12e37a1e7346_JaffaCakes118
-
Size
14KB
-
MD5
e774cd5395420d32d42a12e37a1e7346
-
SHA1
e426db5e10a7a16d78f435c3d99470b2fc47484a
-
SHA256
83002508d6fe021babcd6f88f1f44688081c10d39858ded2be6e8d16953a495a
-
SHA512
c1ab024d7c068766cb15d2bfd19ec7f6638460b9d2c985731c2971242077a5377afb23828127d546fb5c2f0440c496dfcae04e854f84241d39b0fde15f9e5d8b
-
SSDEEP
384:qRpOY/T/2nbsFqblpwwn1BapwpMm5EKNVPatYX:mZTOnbsFel11kUE2Vyk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e774cd5395420d32d42a12e37a1e7346_JaffaCakes118
Files
-
e774cd5395420d32d42a12e37a1e7346_JaffaCakes118.dll windows:4 windows x86 arch:x86
4cdfd61edb33e33085c688e3362330d0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
RtlImageNtHeader
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ