DoeServices
Behavioral task
behavioral1
Sample
e077b6fcf46a073883b032fee99d0cff_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e077b6fcf46a073883b032fee99d0cff_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e077b6fcf46a073883b032fee99d0cff_JaffaCakes118
-
Size
911KB
-
MD5
e077b6fcf46a073883b032fee99d0cff
-
SHA1
e7654bc5fb9ec551d0173df647efc743e92d4fb7
-
SHA256
7027b2239ae146053f6eb0f31a4c3f0f6dc84af804ad44381705b9a041d086bb
-
SHA512
491b8f35b42dcaabb973159e1cf8f1e17410747d57e96900e511f71948495dd081861b78e5dbbd1406b35e3b63a8bdf4058ec879b844f6cb950bc149986ad86d
-
SSDEEP
12288:DauW0INNuTj3kvBGePiI/mKItFWexfY/64prc0jpedqd4hpFzfTOXtHmGGz:jW0INwv3kvB1iCe03vprleAd4PKmGGz
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e077b6fcf46a073883b032fee99d0cff_JaffaCakes118
Files
-
e077b6fcf46a073883b032fee99d0cff_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 792KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 64KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE