Static task
static1
Behavioral task
behavioral1
Sample
2334ee3a044019adfa4f7901ecf84c95_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2334ee3a044019adfa4f7901ecf84c95_JaffaCakes118.dll
Resource
win10v2004-20231215-en
General
-
Target
2334ee3a044019adfa4f7901ecf84c95_JaffaCakes118
-
Size
4.7MB
-
MD5
2334ee3a044019adfa4f7901ecf84c95
-
SHA1
380fc37cba6bd51a5750e02b244ac696a615cf8f
-
SHA256
7b33552df89cab70218f696804b12e9916df97575e1fe90485157121f83b19bf
-
SHA512
65d27178a3b2d9feb9b186ffada0ad0d9918bc3e9db482be3d64904415cc2d272e47919a8b9fa80530b82bf9759acf9e2eb8f33a9eb7e569265a507f57fd2b74
-
SSDEEP
98304:ExfcP6/1X0ANFrbfxdqPeQfg+XMD3hPvOHTpxfcP6/1X0ANFrbfxdqPeQfg+XMDK:ExEP01kANFrbfxdqPeQYhhPvOzpxEP0k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2334ee3a044019adfa4f7901ecf84c95_JaffaCakes118
Files
-
2334ee3a044019adfa4f7901ecf84c95_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
�L�!Thi Size: 1558.2MB - Virtual size: 1831.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ode. $ Size: 1216.0MB - Virtual size:
IMAGE_SCN_MEM_DISCARDABLE
8 Size: 141B - Virtual size: 16B
������ Size: 160B - Virtual size: