Static task
static1
Behavioral task
behavioral1
Sample
e054e055ff85b3a890f8ea6802552ec4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e054e055ff85b3a890f8ea6802552ec4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e054e055ff85b3a890f8ea6802552ec4_JaffaCakes118
-
Size
16KB
-
MD5
e054e055ff85b3a890f8ea6802552ec4
-
SHA1
a75962554f247afbe9a9e383a60f7c6cd0f4d3b1
-
SHA256
87eba9ff07f3c0f669f71ff8440cfd905f8e7480febb4ab12be721b304a74cb4
-
SHA512
5d3f3c33bd04c0363dd374df2b79c040055a15522cc7ce7a0c638df2f38f9ae346ee08bafe5fcd96a6a090145d364c9256ed871139602d1b91f0a81b5344fd59
-
SSDEEP
384:BVWaSgaBbPooiDFUZ1gJXrL49MWVnhWRSKh9/CJi96QY3:jQ7piUZILGMWVARSeN+i91y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e054e055ff85b3a890f8ea6802552ec4_JaffaCakes118
Files
-
e054e055ff85b3a890f8ea6802552ec4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE