Static task
static1
Behavioral task
behavioral1
Sample
2c0d72e89dfffc8020929f792e171391_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c0d72e89dfffc8020929f792e171391_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2c0d72e89dfffc8020929f792e171391_JaffaCakes118
-
Size
117KB
-
MD5
2c0d72e89dfffc8020929f792e171391
-
SHA1
6f9dcf88aa5453296b5aa2b550a090161362d0b8
-
SHA256
98e28eea8963694aa4ce4ddc4fa00ac044a0b949c54d607f074e987ea17d9177
-
SHA512
a8a24765de6a571d3960deef1d4ca8e26ca3d628c25691497ff5037bfa19c3659478455f1cee355bed89ea497414cbd2b733b1e5152c1c889f2c14fc6f17e1bd
-
SSDEEP
3072:gEm6PfOH+grmTfZ4s2PjR7anxna5FjcqJlRmdW:giUbaLV2P4Y5ZJjWW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c0d72e89dfffc8020929f792e171391_JaffaCakes118
Files
-
2c0d72e89dfffc8020929f792e171391_JaffaCakes118.dll windows:4 windows x86 arch:x86
e1625d8071406afdd29d60bedf6aaa09
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetDateFormatA
GetFileSize
OpenFile
lstrcmpiA
lstrcpynA
lstrlenA
ExitProcess
Sections
.sforce3 Size: 25KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RDATA Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sforce3 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.brick Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ