Static task
static1
Behavioral task
behavioral1
Sample
eca688acc8309e9d69698351efc1dd96_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
eca688acc8309e9d69698351efc1dd96_JaffaCakes118.dll
Resource
win10v2004-20231215-en
General
-
Target
eca688acc8309e9d69698351efc1dd96_JaffaCakes118
-
Size
49KB
-
MD5
eca688acc8309e9d69698351efc1dd96
-
SHA1
c6fb8f9c89e01ef19c2294a7b2e81fa229d8f2e5
-
SHA256
78ecbd8b25660fb2c0546db729ca0f8003f6717bd127e8ce60609412349c5413
-
SHA512
3a9a3175fcb2981b0ca4f50444e9ad138cc8a92a2a73aa5feb5316da09aadc3c939b1a8f33f76c68a2394f33a51b7e06739dcce9ea225f633caad76fd9f94f1e
-
SSDEEP
1536:Ynb3rDt/XsafbeU57l2mIrnIPNI2GKulX9rL/X:Yb3NsObD57l9IrnIVIpX9n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eca688acc8309e9d69698351efc1dd96_JaffaCakes118
Files
-
eca688acc8309e9d69698351efc1dd96_JaffaCakes118.dll windows:4 windows x86 arch:x86
a56f115ee5ef2625bd949acaeec66b76
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
Sections
.data Size: 42KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE