Static task
static1
Behavioral task
behavioral1
Sample
eb6030c8199d6234e94edecbffe8f827_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb6030c8199d6234e94edecbffe8f827_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
eb6030c8199d6234e94edecbffe8f827_JaffaCakes118
-
Size
83KB
-
MD5
eb6030c8199d6234e94edecbffe8f827
-
SHA1
cd8e3773f137e613bc11d9470d2ee81e322bda03
-
SHA256
5c15f8b2496f671d7ecfec5de50eb6e498e63b108de3c6125f51180704c72800
-
SHA512
2450c61af5eb5c263156b61fcd7005050175d6819f71e48681246b1c75182a07f3c7262a5757316799eae8d82963deedc8833bf092d35df215a28b8010a0db5d
-
SSDEEP
1536:gIeCmNGm8DqLc8C5PKhHnLuosTmJv1XUKn8vVhj3s+iZ1g:gDCmN78Dl8C+wmzUK0J3sZ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb6030c8199d6234e94edecbffe8f827_JaffaCakes118
Files
-
eb6030c8199d6234e94edecbffe8f827_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 70KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE