Static task
static1
Behavioral task
behavioral1
Sample
e25cf25d0b06935fe80f5e6d5d8a38b4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e25cf25d0b06935fe80f5e6d5d8a38b4_JaffaCakes118.dll
Resource
win10v2004-20240910-en
General
-
Target
e25cf25d0b06935fe80f5e6d5d8a38b4_JaffaCakes118
-
Size
183KB
-
MD5
e25cf25d0b06935fe80f5e6d5d8a38b4
-
SHA1
5dca0965708a946ca943d7e0f2c043ce836987b8
-
SHA256
cbdba3a79bab2d015960a08d7da33685759e094068e576cd0babd35c176cefbb
-
SHA512
2b5898675c2d349d0f7a7db4d6efa2394680d9010fc4aa4a104f679b1cb7dbc1da5dc8e01e0e634355c8320ca5c973d8595e9b780e3942d6ee7fd80a50ffd282
-
SSDEEP
1536:tu+IatnH0A0nv8yTidvkiUNfyV2ZCH7Fmz1LTkKuZKkkg+r1W0LwLtx9mx:ogZUbvO5ylwnH7FmzeVZPxeDLwnMx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e25cf25d0b06935fe80f5e6d5d8a38b4_JaffaCakes118
Files
-
e25cf25d0b06935fe80f5e6d5d8a38b4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
4fran Size: 2KB - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ie77 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lfwy Size: 5KB - Virtual size: 835B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE