Static task
static1
Behavioral task
behavioral1
Sample
ea58edaa8c21242be601763a1ebc519f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea58edaa8c21242be601763a1ebc519f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ea58edaa8c21242be601763a1ebc519f_JaffaCakes118
-
Size
38KB
-
MD5
ea58edaa8c21242be601763a1ebc519f
-
SHA1
93fff2957e5dd853b00daa48624a7f9969839a45
-
SHA256
3f56b1fd45714862c3ad81e41fceccb7b4627b3167333287a72e1bd236c52abb
-
SHA512
99d2de4a2e3966feaabcf4a651dc5d933a11073c6131452a1b3f4ab370106254600f9f5d472cc792cea577aeb79fae8d6470a1232db01821a14096369c2e8ad6
-
SSDEEP
768:12bgqsjmfZVBHvzIJ+xRT7ilgAIKDDi4uq2de9zL4JX:0gqLxVRvMJmRigAIKDWk++4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea58edaa8c21242be601763a1ebc519f_JaffaCakes118
Files
-
ea58edaa8c21242be601763a1ebc519f_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.pcode Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ