Static task
static1
Behavioral task
behavioral1
Sample
2d12653d9923b27e6d9c76c4f43e297c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d12653d9923b27e6d9c76c4f43e297c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2d12653d9923b27e6d9c76c4f43e297c_JaffaCakes118
-
Size
51KB
-
MD5
2d12653d9923b27e6d9c76c4f43e297c
-
SHA1
59cc545bf2c235eccf66c7d8d7c889f3e3133096
-
SHA256
770d9cbeb5c6df65ead850a210d87b0bd41dfc759aecc461f39376e148bc1073
-
SHA512
b34744716c4e076da89569c6a5e90cbb77932bc16df9d7e54382e56b97670f4b674f60314165449d2405c124f7ce26316552766fe9718b6be5d71be288091155
-
SSDEEP
768:rGqjiduijSUaTAxjE6XbH3biOh1RKDZXwh0e+oTqruiBSvzDOxoyyBYoVCmdvrKZ:ssEjFHriOtgc0XoTqrMzDRyyl3+TV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d12653d9923b27e6d9c76c4f43e297c_JaffaCakes118
Files
-
2d12653d9923b27e6d9c76c4f43e297c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.data0 Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 97B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 50B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ