Static task
static1
Behavioral task
behavioral1
Sample
e0ab809f5d4b1e3be15d6e2d6ed3bd0d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e0ab809f5d4b1e3be15d6e2d6ed3bd0d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e0ab809f5d4b1e3be15d6e2d6ed3bd0d_JaffaCakes118
-
Size
167KB
-
MD5
e0ab809f5d4b1e3be15d6e2d6ed3bd0d
-
SHA1
c655eca1202af8c5118a56d83599481efd23cf97
-
SHA256
34ec97d56988730e1aca42e675bac7573cbd9d3ff0711eb14f4871727b3de43f
-
SHA512
e03a6b5dc07a7356c24fa51200693eca02d50d705937660d8ea951717e7069a064f5d9e3264cab35f419a5ed03a77e0ad9d7eeec1a45839980d8916404f0e118
-
SSDEEP
1536:56xz3e9gG8OhhUrg6hzLF4Kcfh3a0r1vZszMvTAAtOVWVHzvibklPa9B9a9zV9vK:Ws6XCLa0rZ+zMvTBKsibklPhI1Bf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0ab809f5d4b1e3be15d6e2d6ed3bd0d_JaffaCakes118
Files
-
e0ab809f5d4b1e3be15d6e2d6ed3bd0d_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 764B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ