Static task
static1
Behavioral task
behavioral1
Sample
eacb5830df8d1ca36f6547f25b393fe1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eacb5830df8d1ca36f6547f25b393fe1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
eacb5830df8d1ca36f6547f25b393fe1_JaffaCakes118
-
Size
295KB
-
MD5
eacb5830df8d1ca36f6547f25b393fe1
-
SHA1
77030a713483efc7ae69d43003dc39d15d2f1737
-
SHA256
a9a50068cba7d6059e6e6116501d73e6d7cbf701af88a9b8ee72f7fb2fcd286e
-
SHA512
b02838bf93952cceb3a2604782b07457583abf12fc6a01f8ae1bdce475a857891697632aacf5e4133e76160c3b22d29451f1e9399af5dae4cd71c521f438a8c2
-
SSDEEP
6144:n2kuhQ99pv+qyGMNX6abPEbvOPJ1IyXMWWcK99y07sCkNxcL:n+Q93UGMYc8bvOPJOlJcKbAC2xG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eacb5830df8d1ca36f6547f25b393fe1_JaffaCakes118
Files
-
eacb5830df8d1ca36f6547f25b393fe1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 282KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE