Static task
static1
Behavioral task
behavioral1
Sample
eb44651412d207a230cbb7ab96f9bc82_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
eb44651412d207a230cbb7ab96f9bc82_JaffaCakes118
-
Size
1.3MB
-
MD5
eb44651412d207a230cbb7ab96f9bc82
-
SHA1
47d4b9ace8e5cd4fe112f00040feef55064b72f7
-
SHA256
ce8630be7a0625cbe141faaa0f6a26fa5925227cc0881ba1deb5bf72e9785084
-
SHA512
c91956e3b41bfce0b8310087ced4f49b6653fe6443a38c142602453f15734e9dcd5e1be734820f5f61a9bafb8a37a4eba12a5035431a5a4c552ee43a142b27b4
-
SSDEEP
24576:UdVBjyY8gNJ+mO8Z9xCqtcFo9ZrivIcs3M2cxEojFcDUnz3Eeg7NLibYc0u+8suW:sjyYmP8Z9xNtcFWZrKdEKxEojFIUnzte
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb44651412d207a230cbb7ab96f9bc82_JaffaCakes118
Files
-
eb44651412d207a230cbb7ab96f9bc82_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 72KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE