Static task
static1
Behavioral task
behavioral1
Sample
0e4b7bf8a23f0de0ab5dd1593a357f57_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0e4b7bf8a23f0de0ab5dd1593a357f57_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
0e4b7bf8a23f0de0ab5dd1593a357f57_JaffaCakes118
-
Size
96KB
-
MD5
0e4b7bf8a23f0de0ab5dd1593a357f57
-
SHA1
3fd9e10853bb58eaa103b5b847338bb5da064116
-
SHA256
1d7770d17b14b28e774cafd967fbba9bb79a35db08fe6daf74c7707c6f38d66d
-
SHA512
e799f6270871f3c1f3290a62ee49885ce5f0358caa33f1acf36d3368ef68ca74e9c7216e80e9994bf89a1e930b4a588f85232bff9630af34352ad8cc9c9b4a78
-
SSDEEP
1536:i727eQQ9lycf5+CEmn6Na1SD5hqmCjw+TFqe2c+Fbpsu0/l2fsAOqs+sc:Sxecj6NmSDTxS3Tj2c+/o/AEc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e4b7bf8a23f0de0ab5dd1593a357f57_JaffaCakes118
Files
-
0e4b7bf8a23f0de0ab5dd1593a357f57_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 184KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xumjmyav Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ehmfrbat Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ehmfrbat Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE