Static task
static1
Behavioral task
behavioral1
Sample
ea5b49c2c89fa576373f3f22237cb139_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea5b49c2c89fa576373f3f22237cb139_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
ea5b49c2c89fa576373f3f22237cb139_JaffaCakes118
-
Size
305KB
-
MD5
ea5b49c2c89fa576373f3f22237cb139
-
SHA1
31754397b2aab771fff85493235a49d9933efdd0
-
SHA256
caeb8bebd7291fa6efd8d9c721eb2d2e92a934ef1a175b0b659d8b59714b3bdd
-
SHA512
7538dc8cbe218aab42d500dca3f02d060db4740c9cf96943e742a191b1f25fffa130ddc6d5e14da46abfbad939746cf8c684b10b528f8854303fa585f66ca709
-
SSDEEP
6144:JCUp3JzS5VCCJjjljw6WEVJDnPp8YIJOXIFzSn/KSe6Kug0rTbR0CrNGmwnA+:JCUL8Ljhw6Hrh8YpIFz2nA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea5b49c2c89fa576373f3f22237cb139_JaffaCakes118
Files
-
ea5b49c2c89fa576373f3f22237cb139_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 249KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ