Static task
static1
Behavioral task
behavioral1
Sample
e12558450172f39328cf203baa393607_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e12558450172f39328cf203baa393607_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e12558450172f39328cf203baa393607_JaffaCakes118
-
Size
744KB
-
MD5
e12558450172f39328cf203baa393607
-
SHA1
4f2c27c923caeb162d595c8421fa831e9a3413cd
-
SHA256
d076f67d7b4b6acca5a873effc7ad0dd15315f4c9bb356f96b19fec1fdc9d56e
-
SHA512
715ec16fbda87a83f2eeb357755a40d70cb13227f37171763a431f94d029244cbe38a1e01213e40fd5b17f853a2db80c74dc3f09fe4a080169a6ba1d43fecdc0
-
SSDEEP
12288:LN+lWT9no60krNuDLUSrexYqdFEUjjoVu0DJJ4R0/WYzAsdurKeKfadM+gqH5B3:IW9oPkrNNSSxbEI0D4MWYVdIKN0jgqj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e12558450172f39328cf203baa393607_JaffaCakes118
Files
-
e12558450172f39328cf203baa393607_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Sections
Size: 576KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 44KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 56KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yP Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE