Static task
static1
Behavioral task
behavioral1
Sample
ed99dbac36cf3af3afb8b8bc8de9e4c8_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed99dbac36cf3af3afb8b8bc8de9e4c8_JaffaCakes118.dll
Resource
win10v2004-20231215-en
General
-
Target
ed99dbac36cf3af3afb8b8bc8de9e4c8_JaffaCakes118
-
Size
632KB
-
MD5
ed99dbac36cf3af3afb8b8bc8de9e4c8
-
SHA1
64bb3da13530aa8468be9a3f49f27e589b1fe2fe
-
SHA256
bdfa729ae8459ac116583c530b7c566cb4d2cf316ef04d6f6b18617f9fc1f57d
-
SHA512
6fef37a896777bdd2adff7ea3eb19cf8b6cb9ac3d2a46b0fb017a8354cc4674002ee2919dd55fdd028b3ab1923626b91f9b1fa2ec657564d557955d1c564a856
-
SSDEEP
12288:rWuaPAxJdOr7p//yIPZH8KWuaPAxJdOr7p//yIPZH8:3U/q5eU/q5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed99dbac36cf3af3afb8b8bc8de9e4c8_JaffaCakes118
Files
-
ed99dbac36cf3af3afb8b8bc8de9e4c8_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
m cannot Size: 1090.0MB - Virtual size: 518.3MB
IMAGE_SCN_MEM_READ
E Size: 3584.0MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: 16B - Virtual size: 144B
� Size: 8KB - Virtual size: 32.0MB