Static task
static1
Behavioral task
behavioral1
Sample
ef8c4f7ad6ceefb592f603c3c736d447_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef8c4f7ad6ceefb592f603c3c736d447_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ef8c4f7ad6ceefb592f603c3c736d447_JaffaCakes118
-
Size
25KB
-
MD5
ef8c4f7ad6ceefb592f603c3c736d447
-
SHA1
324822cca25abd8f095c59b6084c49e32e27d39b
-
SHA256
8fe8c7f37f59e26f4c81c024e1f7e8cc1b003c9bcc4536ea2c49b84b8512b59c
-
SHA512
fbdb31c1ec68de711accc24c6c93701d6a390ce77cb431aa94340f88ad45973d44550194642bc11b78f8c510ceda48115b850b286f204c4e0cfb690fb8f8a0de
-
SSDEEP
384:FmXqho1wwJalE57aeSoTVmvPipGr4zkni2AaTDHqcXdG8ibeLttH5Ekc599eD9Ox:c51DJalZCVInNlXE8ibAZc5WoLRt+xc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef8c4f7ad6ceefb592f603c3c736d447_JaffaCakes118
Files
-
ef8c4f7ad6ceefb592f603c3c736d447_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdndutq9 Size: 662B - Virtual size: 727B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE