principal
Static task
static1
Behavioral task
behavioral1
Sample
e220d614cecb67267cac6ef7787353dc_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e220d614cecb67267cac6ef7787353dc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e220d614cecb67267cac6ef7787353dc_JaffaCakes118
-
Size
17KB
-
MD5
e220d614cecb67267cac6ef7787353dc
-
SHA1
dd74804abf967d4ad6a32cdd9c4ceea263b628ef
-
SHA256
2f6d2c62656f1065fd5be2c7044f8967852421a1ba4a56242e4378e23e2d7150
-
SHA512
c135508850784f6b656b1f0230ce1358a323e1e77fab06eb0a8117a8c394660621ca0e7ca3f0bed35fa6c166cf292ee9907286b2373aa1f1e14e58be4269fa4e
-
SSDEEP
192:Hoyct8BzadwLzBIGh0Zi29rFH8rDvaAjDDBfuxIdI/58B9nf:Ho7wDtIW0ZfB8rJBfWIdI/O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e220d614cecb67267cac6ef7787353dc_JaffaCakes118
Files
-
e220d614cecb67267cac6ef7787353dc_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 602B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ