Static task
static1
Behavioral task
behavioral1
Sample
8edd97257ac6a8e6c64aac7802053118_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8edd97257ac6a8e6c64aac7802053118_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8edd97257ac6a8e6c64aac7802053118_JaffaCakes118
-
Size
247KB
-
MD5
8edd97257ac6a8e6c64aac7802053118
-
SHA1
0976ebed7c47af960d7e72282c587da377451599
-
SHA256
5a23c779578c1208c60b41c9f7d559e603676e6a910c71c4a653c8c77feadbf7
-
SHA512
ce6c4a792816eda86d12f529df16e2b635bf2a040b2a5a665b60407d1163d88e635e02569d65c6bfa40f96f17cff3a9b4d0f964615b51468547fb7312ac0f2dd
-
SSDEEP
3072:3pR/j8Mui4vNaJZEVU67FC52k99geYK4W6mHHvv7VCirTcmS5AIg01+WpgXXDrcS:5ecdZElQ52klB4WLH7785dzVCaxNl8uC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8edd97257ac6a8e6c64aac7802053118_JaffaCakes118
Files
-
8edd97257ac6a8e6c64aac7802053118_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 258KB - Virtual size: 708KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE