Start
Static task
static1
Behavioral task
behavioral1
Sample
2d8b7e0e1e4814170641ea1477bd8ec9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d8b7e0e1e4814170641ea1477bd8ec9_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2d8b7e0e1e4814170641ea1477bd8ec9_JaffaCakes118
-
Size
12KB
-
MD5
2d8b7e0e1e4814170641ea1477bd8ec9
-
SHA1
12bf0d6d6f1a11d34785c52c2dee3e034230215f
-
SHA256
17d1f00b1902797bcc8e06c0c7148c2c378048c21c7b71bf70b76f22e18db910
-
SHA512
16431de5c94be3524add927a78f73edf0f0305fd3c9d010fc9a8a9495be54973b6907b8b54f0f1e797c4ca824283b9a7d96f3c27586f088d166607c6ebf9ad38
-
SSDEEP
192:eba3SrEV8mNK4z5rWp/XpM5ixd5HxZE30ZDcvtG5McCcwf2WUM+K6XzKkgUw92:UihK4Vi/C5Sd5zE94j+2WUM76zFh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d8b7e0e1e4814170641ea1477bd8ec9_JaffaCakes118
Files
-
2d8b7e0e1e4814170641ea1477bd8ec9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE