Static task
static1
Behavioral task
behavioral1
Sample
e26daab50402b0dfccb02d99bbe4291b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e26daab50402b0dfccb02d99bbe4291b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e26daab50402b0dfccb02d99bbe4291b_JaffaCakes118
-
Size
9KB
-
MD5
e26daab50402b0dfccb02d99bbe4291b
-
SHA1
56eacc6e28e5a51fa32b29a025412b369071d69e
-
SHA256
efe3c40517264ab74e43ec7ff0aefeb29bdad732ad9a155809a6c98fe081a49f
-
SHA512
9a46fed8554a26d356a7a8800beb8cd14b9cbdf55056cd29769fa54ee24e2d6f8698df2f82c40d5bcfa5955471fc6fa920dd46f5b0f3d6f9be121fdbb5b22cef
-
SSDEEP
96:xRk2kBkKP8URgXwMsOj9fH/xYYi9VW/i/nNjaKqn9SY87Yl64Hn2kJDD6S:O7nRKEOj9P/xYYizb/nNjRmSYkSJDe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e26daab50402b0dfccb02d99bbe4291b_JaffaCakes118
Files
-
e26daab50402b0dfccb02d99bbe4291b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.code Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE