Static task
static1
Behavioral task
behavioral1
Sample
ed66c0bba85241a86563230f1c8023ff_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed66c0bba85241a86563230f1c8023ff_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
ed66c0bba85241a86563230f1c8023ff_JaffaCakes118
-
Size
162KB
-
MD5
ed66c0bba85241a86563230f1c8023ff
-
SHA1
4c7531ba2f6b6fa3ef74ace75c2f0bf1bafb3b64
-
SHA256
4da15514ef003de6134bf945fef6fca1badd8390cec5c498ba50463fd2dd1de5
-
SHA512
a0204b9e6450aee558e592b5c213b8c6acfc5ee8dbc61544540b8c72f51fa22df9e94435895b783e582947987ecffeda633f398239efe9fcbdb02c468a6e122c
-
SSDEEP
1536:ZxVyfNqLBIPGXsEr0eHZ8fltymIlwLZ3vc++wh2WLJgFWfnj/2w:ZxVoNqNIeXsErWtyDq13vc+L26yWvz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed66c0bba85241a86563230f1c8023ff_JaffaCakes118
Files
-
ed66c0bba85241a86563230f1c8023ff_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 3KB - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE