Static task
static1
Behavioral task
behavioral1
Sample
ec2079fd6b1ba7bda790aa0c7a7ab286_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec2079fd6b1ba7bda790aa0c7a7ab286_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
ec2079fd6b1ba7bda790aa0c7a7ab286_JaffaCakes118
-
Size
9KB
-
MD5
ec2079fd6b1ba7bda790aa0c7a7ab286
-
SHA1
e0429dbaef9884efb55b0ee14af2bb9df1c21da8
-
SHA256
364fb8f842c9ffbd67f62e2810824fd28917cc556e6c8eb0a5e35105c4b9580d
-
SHA512
413b49003a3015603ac8eb6e0432135aed29a4415c2a1bfbe9f4344653b3a45a869240a23bcbf1f107bbfe6d7402a48549f6142f0a3f180dca12eb4349d4a2b4
-
SSDEEP
192:oAeVCnwSk/rXLIgil72Kh/58dzxjx9bM/zrTPkgUw9S:gCnMrbDid2KYZxj/bMfEl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec2079fd6b1ba7bda790aa0c7a7ab286_JaffaCakes118
Files
-
ec2079fd6b1ba7bda790aa0c7a7ab286_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE