Static task
static1
Behavioral task
behavioral1
Sample
2b16bd6a7bc30638ba9f16ae220d1210_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b16bd6a7bc30638ba9f16ae220d1210_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2b16bd6a7bc30638ba9f16ae220d1210_JaffaCakes118
-
Size
33KB
-
MD5
2b16bd6a7bc30638ba9f16ae220d1210
-
SHA1
6b1e529cd4d7e0aafcf72d84107ead7d1bc3b584
-
SHA256
b8cba80a0c04ea63681dfa5148483b4ec8fd00e47b331001e9f9b40ba6090c91
-
SHA512
ef29f85f57fd53f9fcf099bce076de88791c65843c43f0c7457f1c6475f1e978d8a28a52db228e578cb75071c49d867d6877229c745043adb5c8a955d6bfa1cc
-
SSDEEP
384:3YMgJqWZOpsBxhdkmja8q9sjnPS5rh0x6Pp+JJMkYCe/efoE:33gJq47I8N70kYT/e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b16bd6a7bc30638ba9f16ae220d1210_JaffaCakes118
Files
-
2b16bd6a7bc30638ba9f16ae220d1210_JaffaCakes118.dll windows:5 windows x86 arch:x86
882a93eaa965165392b7c99c7b8d148d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadLibraryW
LoadLibraryA
GetModuleHandleW
GetModuleHandleA
CreateFileW
lstrcatW
GetWindowsDirectoryW
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zz Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zz1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zz2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 454B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ