Static task
static1
Behavioral task
behavioral1
Sample
ea10d347df778c994904b13fd9675e31_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea10d347df778c994904b13fd9675e31_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
ea10d347df778c994904b13fd9675e31_JaffaCakes118
-
Size
7KB
-
MD5
ea10d347df778c994904b13fd9675e31
-
SHA1
074ff9b453acb63050edc5716f28296b99d702ba
-
SHA256
3055ef74e0e80de10b02c6a2c053cc9eddf47165277cab3f7bf96740f6fa5c8f
-
SHA512
64d200b0470dc8fc0df4f3ea2e4d71aecd71668ac1a1ee9f88d68d0ed806b4c0559dd6e2e89f05552d7d84771e68e05ab64d5285bc62c66adda0c78be912d0e0
-
SSDEEP
96:os63xGv3ZGA29XVzp7i9POfiG5YgJjcUMfmEzEE6G550oW7vYlvQ/TJzqkgcwQw9:8BGvJg9S2F5hefmEgc9EpqkgUw9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea10d347df778c994904b13fd9675e31_JaffaCakes118
Files
-
ea10d347df778c994904b13fd9675e31_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE