Start
Static task
static1
Behavioral task
behavioral1
Sample
2ab26bb2b7e906dd245e459403b1cabe_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ab26bb2b7e906dd245e459403b1cabe_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2ab26bb2b7e906dd245e459403b1cabe_JaffaCakes118
-
Size
96KB
-
MD5
2ab26bb2b7e906dd245e459403b1cabe
-
SHA1
8799d60e01cb6c31761ad02d4daf863be70c4682
-
SHA256
24af2bd9e3666dd0f791d4d7504bb5cb4bac29ecff92866c6c5da9c282ebb069
-
SHA512
c1439fdf300dfe16008f71c9e41da53f1ee51c5071f7ab19796c8ee4b692772e9c3b05090b288f8ec5519dc385de4a0ef594a7a1fc34cdb6489352baafa28d09
-
SSDEEP
1536:KkWNM3EUVE/7cth+AC2UZmdrXq1ui5s9V8dT:oK3EUgcg2UKcZsodT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ab26bb2b7e906dd245e459403b1cabe_JaffaCakes118
Files
-
2ab26bb2b7e906dd245e459403b1cabe_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE