Static task
static1
Behavioral task
behavioral1
Sample
e18b9e1b11566b1f2ec750016ab16c20_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e18b9e1b11566b1f2ec750016ab16c20_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e18b9e1b11566b1f2ec750016ab16c20_JaffaCakes118
-
Size
26KB
-
MD5
e18b9e1b11566b1f2ec750016ab16c20
-
SHA1
43f11451028ac1068069f7f6d9621393075f684d
-
SHA256
48049081d92586898ac4d6c0a33093defda32d8424843711f713d6c36e46d6eb
-
SHA512
6d2b8b33d4be13b54403d459c2be1327b2862205f1f88edf8562e14efeae3a63b5e9cfce5429ea729331fa93939746133fe927c57d468707c808ab9213737c9f
-
SSDEEP
384:mBe7Y8C97fIk0XZ5wTXqyBbYi0Ho2QRQ9Yv7GhQv3aVxXDhx8n3M7H2/7UTrciMy:mZfl65tYEo7k1hQQJDhx8B7PkLdS+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e18b9e1b11566b1f2ec750016ab16c20_JaffaCakes118
Files
-
e18b9e1b11566b1f2ec750016ab16c20_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
djlyhe Size: 627B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE