Static task
static1
Behavioral task
behavioral1
Sample
2eb98d6cbcfd1ee74468c0f5c1219198_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2eb98d6cbcfd1ee74468c0f5c1219198_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
2eb98d6cbcfd1ee74468c0f5c1219198_JaffaCakes118
-
Size
52KB
-
MD5
2eb98d6cbcfd1ee74468c0f5c1219198
-
SHA1
cfb63cb0cf2bba1c0343a29cf16c4d491149a6fb
-
SHA256
faac2421d2d896a2dc9b315cc0e066dbd87531826ec2d17e14cf6bb00600f97f
-
SHA512
3e87439a982316b93e2830a22f935d6fe8a737838b221e1175aad9b9a3ffa659268a19abaf6c437efd7e5d9be0e5e1e7723ea9f265a3670a5d8684085f2591cd
-
SSDEEP
384:sO+ohE2BhIs9+n749ewXWd21pmIS+AYj6yhE2B13NJqtM:H+olQsOVuWGp2+AellVAM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eb98d6cbcfd1ee74468c0f5c1219198_JaffaCakes118
Files
-
2eb98d6cbcfd1ee74468c0f5c1219198_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Sections
36k5otzj Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
369jthgi Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
34i3cxwp Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE