Static task
static1
Behavioral task
behavioral1
Sample
2dddd5a4ba4efe970c7518f7b446fdd5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2dddd5a4ba4efe970c7518f7b446fdd5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2dddd5a4ba4efe970c7518f7b446fdd5_JaffaCakes118
-
Size
44KB
-
MD5
2dddd5a4ba4efe970c7518f7b446fdd5
-
SHA1
3f311dba5d5d2d100a671e233323560023fb8102
-
SHA256
844738e04f790d60ecd47355e5870a97de4e770eaee4921843f0fbafad8bde9e
-
SHA512
29366ab5dd827fe7e63b55659a35b686f233a80c6c3e1fd9716a1b37b63ee4f58575f7c7f10a8be41e4e486c0c665dedd329164c8f243a05757b6a4d84472569
-
SSDEEP
768:Wtv9jN1PjseQL9DUU4zodbbiJFPm5GfJZfThMzrqw1SPdifoUYqp8QyUf:I9jNlgUU4sijIGH1Mzb1aifoUp8vUf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dddd5a4ba4efe970c7518f7b446fdd5_JaffaCakes118
Files
-
2dddd5a4ba4efe970c7518f7b446fdd5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ