Static task
static1
Behavioral task
behavioral1
Sample
2afe2c33f1c5ad5d99aa9d86fbf566cd_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2afe2c33f1c5ad5d99aa9d86fbf566cd_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2afe2c33f1c5ad5d99aa9d86fbf566cd_JaffaCakes118
-
Size
137KB
-
MD5
2afe2c33f1c5ad5d99aa9d86fbf566cd
-
SHA1
c6de4c0a2f7408928e1873889aa67d49cc42ad5b
-
SHA256
17b37383b2eca0331a764f603f80018f1675bcce176b8eac76f2d706e608b9e1
-
SHA512
b195e3aa75b7b325fe391c42950d59f563b176f40cd132548c57f56bc8039105a7351ba28018eb078846e300dde66b1499db43edb12f03c56f717d7166582904
-
SSDEEP
3072:++Mg3HyhSwYhrzjsedCti2eQ+1JhoFncP2V7wogP2MQ+:lf1hrz3SSFJh4c+V7wHdV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2afe2c33f1c5ad5d99aa9d86fbf566cd_JaffaCakes118
Files
-
2afe2c33f1c5ad5d99aa9d86fbf566cd_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 219KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE