Static task
static1
Behavioral task
behavioral1
Sample
ea52eaf8cfa9d0bf05966e4372885c9d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea52eaf8cfa9d0bf05966e4372885c9d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ea52eaf8cfa9d0bf05966e4372885c9d_JaffaCakes118
-
Size
71KB
-
MD5
ea52eaf8cfa9d0bf05966e4372885c9d
-
SHA1
e90811ed1d1c0416e5de95b37e5390148321cc2e
-
SHA256
f83d3b41e2767b9311b0ca06b37f6e653652dfbc3ed7da9a2abbdd2b338e7c0e
-
SHA512
a3ff8fb344b8fb0016fda9bfdc9f54e145967956f58fd4ffc338033816d3c9cbedf1b0b2e6cf7d657202b77d603581bf136926f651a4e066e36477f8c645b9b4
-
SSDEEP
768:qV5I1wcMQuZDYcKZjUIOKquvFWKRV7X8PHYgYAm4G64SgeTCMKvMdwDYnRtOXxdN:qV5swcMQwaj/jBKexjLwbKVSEYQffyo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea52eaf8cfa9d0bf05966e4372885c9d_JaffaCakes118
Files
-
ea52eaf8cfa9d0bf05966e4372885c9d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
s8kgxds7 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ajg Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE