Static task
static1
Behavioral task
behavioral1
Sample
2939f4fbabfe892d374d3b9bddc24c68_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2939f4fbabfe892d374d3b9bddc24c68_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2939f4fbabfe892d374d3b9bddc24c68_JaffaCakes118
-
Size
72KB
-
MD5
2939f4fbabfe892d374d3b9bddc24c68
-
SHA1
972d997d20d3a7192ad6e075bb35bb9b0e4755bd
-
SHA256
c586aa403206d94328cde2c11a558b2101f3127bdb07ead412da1b706998c5a0
-
SHA512
aa6a77bf9d721c0d65d8eb9cc3d0d04bc0a0f1b4d918f64c627cf197a66b80bc49dc6afbeb23ab2b581b794423740f488e1cf7fe4f9db2515017ec01032df035
-
SSDEEP
384:iwIexYs1+XpXi+Ny72Vjw+ymC8ToIzDj+:iWf1+tioi2VjbUUe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2939f4fbabfe892d374d3b9bddc24c68_JaffaCakes118
Files
-
2939f4fbabfe892d374d3b9bddc24c68_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE