Static task
static1
Behavioral task
behavioral1
Sample
0e2d3c9cfdf1e147ec8c1181ce819557_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e2d3c9cfdf1e147ec8c1181ce819557_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0e2d3c9cfdf1e147ec8c1181ce819557_JaffaCakes118
-
Size
10KB
-
MD5
0e2d3c9cfdf1e147ec8c1181ce819557
-
SHA1
e5bfb264daa225a90dc48481ba1030e2ed5158c3
-
SHA256
ce5d214913643d8c5524d0aec5ca88dfcdb83853dcc94dd46610f4f02f52e0aa
-
SHA512
b9831e5ef362e4a3ada0e419e7e7726c1c8988c5067f7b3908ba60e473f58e58ba711b9dfe561c2ae939045aadc9240e74b2d0ea377aa72344b75a8d2c86b29a
-
SSDEEP
192:E0Zpv8+lII1NfKI6sF6e7wI09diwfyycIroMPDUwtdvrz+vc0V3p8KkgUw94g:1NN/6a6eUI0Hiw4Ir/Ptz+Zn8F7g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e2d3c9cfdf1e147ec8c1181ce819557_JaffaCakes118
Files
-
0e2d3c9cfdf1e147ec8c1181ce819557_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE