Static task
static1
Behavioral task
behavioral1
Sample
2a08d65a49d635b184895faa8849e4d9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a08d65a49d635b184895faa8849e4d9_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2a08d65a49d635b184895faa8849e4d9_JaffaCakes118
-
Size
31KB
-
MD5
2a08d65a49d635b184895faa8849e4d9
-
SHA1
7612349b41edd50a215ed16056253bb2b25af761
-
SHA256
65019992a37574f55d896dbb1d3a921885746ca607239e02989f029de718bfa3
-
SHA512
137fdb2d557987a9a31a70f08ca42ca88eddc2c762999d9b48cc2f24d8f84a1ab6efdc5ed56e8137b07c3dc38a8ebc2697861f7bd57e1a22a0ea8a24772cac05
-
SSDEEP
768:DgUJyPCSDaAV3T1lZH2DL2MD9ya42m1FoC+UCIemxrN:DgvnT7ZspTZmfhCOxrN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a08d65a49d635b184895faa8849e4d9_JaffaCakes118
Files
-
2a08d65a49d635b184895faa8849e4d9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
kf8 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9sifflu4 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dusswq Size: 195B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE