Static task
static1
Behavioral task
behavioral1
Sample
0eca5cc3c4ad76cae5c55940ecee3f6b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0eca5cc3c4ad76cae5c55940ecee3f6b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0eca5cc3c4ad76cae5c55940ecee3f6b_JaffaCakes118
-
Size
55KB
-
MD5
0eca5cc3c4ad76cae5c55940ecee3f6b
-
SHA1
5d444e35c48684eeaf5dd3557d94676b2d33f457
-
SHA256
d2126222eb6ef141d84555ce4e90216bdd42895e920c390743cd9c0ea39d819a
-
SHA512
2f8f753b91fb9bc5641419543dcf6355c68a31ea9c6e297589da15b5b83406a5328151014774a4f76830c30a92b3ad30b10308ed8e6f3eb9085b2d49cc3dd910
-
SSDEEP
768:4CyqvQvWJb0O/DvIe+59B7ftNeFiHCjMAdRSCUJdwjMvEl995jSHmHBZBAnQ99m:/yqvQyb/DvI5h/yiHCj/dRk/v9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eca5cc3c4ad76cae5c55940ecee3f6b_JaffaCakes118
Files
-
0eca5cc3c4ad76cae5c55940ecee3f6b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ