Static task
static1
Behavioral task
behavioral1
Sample
e0d379d81f69181348b1b9d6ad446a8b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0d379d81f69181348b1b9d6ad446a8b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e0d379d81f69181348b1b9d6ad446a8b_JaffaCakes118
-
Size
37KB
-
MD5
e0d379d81f69181348b1b9d6ad446a8b
-
SHA1
8e35545db54765089184ef57fa1bea32c3ce030f
-
SHA256
2125d91b634b03c4267777e3ca17a01cb9bc77a2e7697c3219b16d90e0014c95
-
SHA512
b2574e1fc661ebe1611d4fa89031977f61e56758025748d19f2bc8c4daad3b58868563b48472760bd76464b1c631b27510ebce37b70516b4c1c6af1c590fbce3
-
SSDEEP
768:38XScD1GgWStNQJVlwsT9WTqoc3a8qJzNR:sSm1GgNoCKWokRR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0d379d81f69181348b1b9d6ad446a8b_JaffaCakes118
Files
-
e0d379d81f69181348b1b9d6ad446a8b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ