Static task
static1
Behavioral task
behavioral1
Sample
e1426a9c60b65900f30b050de5f397b7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e1426a9c60b65900f30b050de5f397b7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e1426a9c60b65900f30b050de5f397b7_JaffaCakes118
-
Size
9KB
-
MD5
e1426a9c60b65900f30b050de5f397b7
-
SHA1
65bccff5fcec1e773cf7ea3b1729560ec203e417
-
SHA256
66b27a97a020f302d6b20bc84706a74e09085701d2bb60520959e61e6d3d7c57
-
SHA512
ea78696061a49c57d1568160c82afc68347654e8480b4772039942f7d849889cabd7f23f93c9b15568da43daddfa58a6e87f8d02b0451647db25b680c41675e8
-
SSDEEP
192:4No5kmXmEEnkITKoUBQIEtNvokhF5hDJtKfnv23qJthDN:m1mWEHI2oT7Nh9Dqv6qJtN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1426a9c60b65900f30b050de5f397b7_JaffaCakes118
Files
-
e1426a9c60b65900f30b050de5f397b7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
fdsf Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
csa Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fwa Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE