Static task
static1
Behavioral task
behavioral1
Sample
ec0fd74baed7f66beb6f0c1d84de1fd2_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ec0fd74baed7f66beb6f0c1d84de1fd2_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
ec0fd74baed7f66beb6f0c1d84de1fd2_JaffaCakes118
-
Size
26KB
-
MD5
ec0fd74baed7f66beb6f0c1d84de1fd2
-
SHA1
e7d591069a3e95cc22c4520f2acac7d708f99d14
-
SHA256
96c547a0dba50cc34fd3f48c0e5e16059e48d88a577c89d890d09f9c0d80da64
-
SHA512
84a5bbb860d805083a7763ad56d6eff1bdf3f162a81f904a6f598329c777bf584e28c3c6207f1948d40f0152802fe1d5b5abba2488a63b5dc383411201939428
-
SSDEEP
384:Fox5+chNfinR4O0vAmqJh6GYY+4lDH4zaxI5yzrLSyw6+eEzsuTDXvKkiu+pPyP:G5phFiR4O0vAvwYrYOfGywnzsUD/u/I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec0fd74baed7f66beb6f0c1d84de1fd2_JaffaCakes118
Files
-
ec0fd74baed7f66beb6f0c1d84de1fd2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xgb Size: 748B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE