Static task
static1
Behavioral task
behavioral1
Sample
2bcdb72b12d0e41122bfb6ee49273120_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bcdb72b12d0e41122bfb6ee49273120_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2bcdb72b12d0e41122bfb6ee49273120_JaffaCakes118
-
Size
10KB
-
MD5
2bcdb72b12d0e41122bfb6ee49273120
-
SHA1
54bbab4d8f260389c296d4822bd0e140984b2c35
-
SHA256
47de29e5fdd38f1bbc403f63cdf9552f2563d5f40b81a50aafbb2688d096d1a8
-
SHA512
8d4783cbf40754ad41a3d8d773fcec65c4d6a2e2aba56b6dc016e13b516c7153bbe1b44431170958b5e730ba6ebbbab36e548983c44ed4d4e68fe1e6da98f855
-
SSDEEP
48:qH6iYuMwR/M+880y8fdbhFiTvu9zliuvv3oCD53qCFdM2Uj++UcCy6ZD8:niM+880y0nwTG9zlnv3Z53pObCyw4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bcdb72b12d0e41122bfb6ee49273120_JaffaCakes118
Files
-
2bcdb72b12d0e41122bfb6ee49273120_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 666B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 466B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ