C
Static task
static1
Behavioral task
behavioral1
Sample
279e34b9389b2902abbba286c8c2323c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
279e34b9389b2902abbba286c8c2323c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
279e34b9389b2902abbba286c8c2323c_JaffaCakes118
-
Size
5KB
-
MD5
279e34b9389b2902abbba286c8c2323c
-
SHA1
2a26a834a42c04312345263a67bf0981f38b0619
-
SHA256
4954ea4cf5294d86ba98563e806df88c4e60bde7e5037091a5b6a5a4661f5fd1
-
SHA512
40f2cfe32e673e9cd37beb37a907b32f5276014f1d437e585f1c21822848052d64e79a48b6f7522fde18ab23855591393d99d525186899cbbe23028e1ce41605
-
SSDEEP
48:ZvtxT2L7+trCOeUUU0/CWS/xGukHCqfd6eCj671OTCl0wUa7hj60oI1X0USWet/7:Z1Z2K50rEqlfhl/7hjZLpfC8J8Xzt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 279e34b9389b2902abbba286c8c2323c_JaffaCakes118
Files
-
279e34b9389b2902abbba286c8c2323c_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.data Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 218B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
.edata Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ