Static task
static1
Behavioral task
behavioral1
Sample
ef5991c6fba37e172c0357329ae9039e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ef5991c6fba37e172c0357329ae9039e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ef5991c6fba37e172c0357329ae9039e_JaffaCakes118
-
Size
83KB
-
MD5
ef5991c6fba37e172c0357329ae9039e
-
SHA1
ffab51bb0af759157c6b366181aec639c2d17ea7
-
SHA256
65427457a62f644be6bea4c66c36a4547ac891fb0c9d08a6bb6ab0163f68fd35
-
SHA512
8a4cecab4294bf0c3fc76911273727c774f6a5df461adf8e6921ff0a4e15ede3651fdea536091631716e533a852d889c79faa9607b9c24e83c9ba9a81df7fc91
-
SSDEEP
1536:ZuSn0HMEWmppJUP95Fs3xEgO3Uje3fxo2iW08qAhIKn2CLfNAQ1i:E2pE36wxEgOkKu80OIKn2A+H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef5991c6fba37e172c0357329ae9039e_JaffaCakes118
Files
-
ef5991c6fba37e172c0357329ae9039e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 70KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE