Static task
static1
Behavioral task
behavioral1
Sample
5eecdc954f2c6e55584b97f580e9d0c9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5eecdc954f2c6e55584b97f580e9d0c9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5eecdc954f2c6e55584b97f580e9d0c9_JaffaCakes118
-
Size
91KB
-
MD5
5eecdc954f2c6e55584b97f580e9d0c9
-
SHA1
4aae636772fddb6339744711536d3d5599bde909
-
SHA256
6c5592cff0d6fd26286ee5438fa85d4587a9999b8343c9e42915518827b2a295
-
SHA512
15fa9f7c23f259a2ec786328e92abee66ce8dd0ccc0ba12a753b65f8c2f7d94a0d601235fa4b01dd47bec30d21a0773c0e4efc54798a099eabac3a4ee684a867
-
SSDEEP
1536:BiM6w2tDJzQS70+LeAj0dz+nprIO2FnToIfa:8JzP0+LeAj0dzED2tTBfa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5eecdc954f2c6e55584b97f580e9d0c9_JaffaCakes118
Files
-
5eecdc954f2c6e55584b97f580e9d0c9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size: