Static task
static1
Behavioral task
behavioral1
Sample
2a23ca4d4e96c38e8ddc16a2b90d1ea2_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a23ca4d4e96c38e8ddc16a2b90d1ea2_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2a23ca4d4e96c38e8ddc16a2b90d1ea2_JaffaCakes118
-
Size
110KB
-
MD5
2a23ca4d4e96c38e8ddc16a2b90d1ea2
-
SHA1
94e9b6583e281b6f14589eeb6bb81b643376316a
-
SHA256
4ccab9d5a656bf4dcde05ff06067e1e90081404bfb3281a444f053b4218c8ffa
-
SHA512
fca3a94c3b064854e89b8e02a49b08d985726618eac7ceac8dc53b153347eab9e3f596ad84fde23ccf675a4d9a013996b68c1372d1a6c2781c3ced776ca466ce
-
SSDEEP
3072:5PkgUp8uDiQRzbgdOOC3SpQBSFnhp3vutjGBwld+eB3:5PhW8QzUdO6pQBwtmlGidPB3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a23ca4d4e96c38e8ddc16a2b90d1ea2_JaffaCakes118
Files
-
2a23ca4d4e96c38e8ddc16a2b90d1ea2_JaffaCakes118.dll windows:4 windows x86 arch:x86
24a4716f435c30e4341d06b24880e39c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
GetStartupInfoA
TlsGetValue
lstrcmpA
lstrcmpiA
lstrlenA
CloseHandle
Sections
.sforce3 Size: 26KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RDATA Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sforce3 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.brick Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ