Static task
static1
Behavioral task
behavioral1
Sample
ebd9e7a7c2ec3eb7f11c492a8ffa5626_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ebd9e7a7c2ec3eb7f11c492a8ffa5626_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
ebd9e7a7c2ec3eb7f11c492a8ffa5626_JaffaCakes118
-
Size
54KB
-
MD5
ebd9e7a7c2ec3eb7f11c492a8ffa5626
-
SHA1
5ada5cdf4ace604cd74a1f7506551a57e22d5522
-
SHA256
717dd5b44105a3db15657aeaca821f3b0e612a19632a2d77e74ed9fa2fe718a2
-
SHA512
33452e50957adc56b4771e78eaddbfcb68cabea1450eeba8cecdcec0cc426ac618dcb63377963d6246561921fc0317a2f6505062161ae28ff8a27af46f319902
-
SSDEEP
768:rJOMInftQfbVrGgIi4LDVlpYaho9S4ASQJwi050j1ZId8JJCr3tdADkAMirLXeCG:tOz29S4ASQJuM16ztSDbFXC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebd9e7a7c2ec3eb7f11c492a8ffa5626_JaffaCakes118
Files
-
ebd9e7a7c2ec3eb7f11c492a8ffa5626_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ