Static task
static1
Behavioral task
behavioral1
Sample
e07803d8cc8ead1ae7907b8f300274cc_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e07803d8cc8ead1ae7907b8f300274cc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e07803d8cc8ead1ae7907b8f300274cc_JaffaCakes118
-
Size
307KB
-
MD5
e07803d8cc8ead1ae7907b8f300274cc
-
SHA1
f9334ace4d6746740b35c8f201d31ef30b09c580
-
SHA256
1c5a777a8836da62ea4dcf47e3227726cb9f4126d64c0723c9c5738cea8e4be9
-
SHA512
622230374a68349bc194efda03561f760a5f66c700c33bc1e83e7d078c8bbf277964c4931082452fb767b49089aee6c720254266f2d3c761c2a989731826b6b0
-
SSDEEP
6144:AcTvKAC93g6sHbpu3KJb8z7naPIuX98YTk3z:AcTvN4tubpu3W4z7nap98oSz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e07803d8cc8ead1ae7907b8f300274cc_JaffaCakes118
Files
-
e07803d8cc8ead1ae7907b8f300274cc_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
CODE Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ