Static task
static1
Behavioral task
behavioral1
Sample
2923b5c289a732297a4d2361b304a33f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2923b5c289a732297a4d2361b304a33f_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2923b5c289a732297a4d2361b304a33f_JaffaCakes118
-
Size
296KB
-
MD5
2923b5c289a732297a4d2361b304a33f
-
SHA1
eb31f296373c9436947fb2e16a9272cc95a8c9af
-
SHA256
8c2baa0ade9a0c573d519130630f5f05310d0149f90bc486a94354534b00faf6
-
SHA512
4fc0a19d3ef935a61760bb498aadf04d1329fd5e2f91a4cdc0d01a4ab56da62d0caafc7e5347b35def683b34977c82732ab191ec627c5e581bec4bf3c95b8518
-
SSDEEP
6144:UKwetUZV2LPXtmPls36OOpET9DO8TTIXu/YvH6Q2g+gd6UDar:UXU/XQPlsROpElOfxH7d6Uur
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2923b5c289a732297a4d2361b304a33f_JaffaCakes118
Files
-
2923b5c289a732297a4d2361b304a33f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 95KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ