Static task
static1
Behavioral task
behavioral1
Sample
e0911e0924115ce03fbe91d43831cc1f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0911e0924115ce03fbe91d43831cc1f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e0911e0924115ce03fbe91d43831cc1f_JaffaCakes118
-
Size
113KB
-
MD5
e0911e0924115ce03fbe91d43831cc1f
-
SHA1
371330b661090fb547dee73e2e492e3513b9788e
-
SHA256
178d02cdf9d0d38b6a8c74705d966ebbd093b91881bea5463fa513fb72d5d4c0
-
SHA512
f6876d79eae58d0526430f1c45730eb646dc73a8d050499cb6ed629d50cf665fd05abc4690eee2d5e8e202dd17c6347fce0aa9494d6bb7b2573074bd28a8c11c
-
SSDEEP
3072:D33TTPt4MCjBvj3cGKRAOl6kIOuNXv7V8ZIP6nT2:D33Txx2lXCl6kif6OCT2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0911e0924115ce03fbe91d43831cc1f_JaffaCakes118
Files
-
e0911e0924115ce03fbe91d43831cc1f_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 125KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE