Static task
static1
Behavioral task
behavioral1
Sample
2801135c0e3bff4474992b34dbd61cef_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2801135c0e3bff4474992b34dbd61cef_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2801135c0e3bff4474992b34dbd61cef_JaffaCakes118
-
Size
12KB
-
MD5
2801135c0e3bff4474992b34dbd61cef
-
SHA1
44fc9db16e76fc92cfdd15d07f513940bce71522
-
SHA256
739e1b73c2323ae0534a2a7c7e4ea8c22d877aa554f6ec84764e014a8d2f3992
-
SHA512
12646a2e6721708722c7107b239d84c98d7df2424722babae8822ba2488740c13b56f8a7ad38488c52292d40bec8b952d512c4a89a38681600687e7c3c3e9c55
-
SSDEEP
192:lQQ6LJm9tF+uwpQJGIgmAwV19by80yrbJsRNjZBH254DXMAvjCf1USguYeBCpxkc:K92tF+u+KGIZASbyybJs3THWBA7Cegw1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2801135c0e3bff4474992b34dbd61cef_JaffaCakes118
Files
-
2801135c0e3bff4474992b34dbd61cef_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE