Start
Static task
static1
Behavioral task
behavioral1
Sample
0ed53455e2dac7542166f70913f502d1_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0ed53455e2dac7542166f70913f502d1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0ed53455e2dac7542166f70913f502d1_JaffaCakes118
-
Size
13KB
-
MD5
0ed53455e2dac7542166f70913f502d1
-
SHA1
826798796a23b1128837603c2028e88b1c3f28e2
-
SHA256
84bf80369e89d44304d78637baa5f7c7026b82ddd023799b94303df4f2c6ade7
-
SHA512
2ece83fa01f35dddf5e0d8ffe1de8bf92ddece364229f51f46623f4ce6dc1bf2eff185db7938ef89eccae7e41406c752afba01d0aa9b7e982f1d9b4de43baf65
-
SSDEEP
192:0epTDq/RfGKjbeNglIuRauPavutT6LEr896gsHFyuAR3E9J4fiSNUcDFyMbAHjs/:bTmpfGQZ/RNRl6L7zsCRc4/xAHjz2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ed53455e2dac7542166f70913f502d1_JaffaCakes118
Files
-
0ed53455e2dac7542166f70913f502d1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE