Start
Static task
static1
Behavioral task
behavioral1
Sample
e92eac64f2331906cda3aa07d11a7a9b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e92eac64f2331906cda3aa07d11a7a9b_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e92eac64f2331906cda3aa07d11a7a9b_JaffaCakes118
-
Size
11KB
-
MD5
e92eac64f2331906cda3aa07d11a7a9b
-
SHA1
beb2131761eb97e444fddb4b10fc6d071e53c5d8
-
SHA256
08d433603c2c542681a0c1f5e34ee802d25a1d92f51be3128e4cbcf2ca91a318
-
SHA512
23dd5001c03eacc3580a3582aed726ec89a267fb5db9a9e2083e93a4d7dc33b30890d147172111c797a4108b5bec3374c7b16635b312e0166182815f00428b3a
-
SSDEEP
192:A1GXXpzq+u+TEBssH52i1UpnNe9rLORyIKJAkcypSenxbfMrZ5jRvjinaASaIkgM:A1GXXZq+u+oBso80cNULOoIFklpSeFMk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e92eac64f2331906cda3aa07d11a7a9b_JaffaCakes118
Files
-
e92eac64f2331906cda3aa07d11a7a9b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE