Static task
static1
Behavioral task
behavioral1
Sample
2d974ebe73199e78a2a2e0f786c89263_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d974ebe73199e78a2a2e0f786c89263_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2d974ebe73199e78a2a2e0f786c89263_JaffaCakes118
-
Size
30KB
-
MD5
2d974ebe73199e78a2a2e0f786c89263
-
SHA1
5402fe964d06b3ad0cdbee7887705c9be02e76a0
-
SHA256
d5ddac425c347f973e7011aae77e122aa37d9f939ff33a5176279e5e5f8d9ece
-
SHA512
d4a016848877fa1f4357f7738566b2be3ee19577f077b5c19b65d7ac80868e83b7673f0741b26ebfa24a82235e3a84892ef165780cabee5628000be212ebc988
-
SSDEEP
768:WxGPg7jFn3qpMaL7jxD4ltFPnAvpNEqqQtnaCIlp:Wkg7jF3qPPjxD4VPAvpNEqq+Jk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d974ebe73199e78a2a2e0f786c89263_JaffaCakes118
Files
-
2d974ebe73199e78a2a2e0f786c89263_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vnq Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE