Static task
static1
Behavioral task
behavioral1
Sample
2c09fcb5dcf8d504b11327fb9e053bf0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c09fcb5dcf8d504b11327fb9e053bf0_JaffaCakes118.dll
Resource
win10v2004-20240708-en
General
-
Target
2c09fcb5dcf8d504b11327fb9e053bf0_JaffaCakes118
-
Size
12KB
-
MD5
2c09fcb5dcf8d504b11327fb9e053bf0
-
SHA1
fc1ac40d93af699d302dfabeed942b11f34f3994
-
SHA256
f565f9960acc481fae17ba306cc0500b2383902d08d1c42f26bc747d78b752e5
-
SHA512
4c72a98be8971b8723e743f3ed44825efcf3509165318e68a24cf42c8c77f092bcc7a048ce4a2c22af7117bec2a1c0dc2b00b183678eba03f90c11e0a527869c
-
SSDEEP
192:bQMqsNXxjLLXgWTndBlc5fgTOz77cf9EtfVsnRwl2lmirhd5EbsD+1kgUw9R:bYoB7wGnTl9TOz77clKSrhzEbsi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c09fcb5dcf8d504b11327fb9e053bf0_JaffaCakes118
Files
-
2c09fcb5dcf8d504b11327fb9e053bf0_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE