Execute
Static task
static1
Behavioral task
behavioral1
Sample
5ebd9ba08e8f6919e78f31ffd75c3fe5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ebd9ba08e8f6919e78f31ffd75c3fe5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5ebd9ba08e8f6919e78f31ffd75c3fe5_JaffaCakes118
-
Size
96KB
-
MD5
5ebd9ba08e8f6919e78f31ffd75c3fe5
-
SHA1
6f58ce5079bf5d887d3240b953b840325d809286
-
SHA256
2141c3a85eddf84b52e7ab26079a5f5329ee9ebef781a4c3a990de329225c66c
-
SHA512
1af65d79c64928ad016a4131a13651164e9b0588435c6e65f73e5657433f6ebbc8087f66bf52b024a82acb0373a215d54af5e1c2ef174dc96fe6cb38f841b3ce
-
SSDEEP
1536:Xp9Sa6EcRGwhbRLnIdXiZWUe8IFEmOK1gyYq+MLn+JRTrDYTyP5C:+TdbdIdyVeImN1gyjln+JRTHN5C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ebd9ba08e8f6919e78f31ffd75c3fe5_JaffaCakes118
Files
-
5ebd9ba08e8f6919e78f31ffd75c3fe5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ