Static task
static1
Behavioral task
behavioral1
Sample
2eec67eb7c4edf79b36b5a0ac94f584d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2eec67eb7c4edf79b36b5a0ac94f584d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2eec67eb7c4edf79b36b5a0ac94f584d_JaffaCakes118
-
Size
34KB
-
MD5
2eec67eb7c4edf79b36b5a0ac94f584d
-
SHA1
8fa2e1e311462ffed4d1509e1d6836deaac30bc4
-
SHA256
54457098735619f11da0e8d2f20f752f7831606c345ba9bf2a5db868568c7480
-
SHA512
d406ff0aeaabdf75f21d5ab28a50991c6ff4658cc1fa2d6ee1e29a4fbc86f07b1967900aa8766a31c0714b5fe914c99a9101707162346d399531b1f68464399c
-
SSDEEP
768:A34nRoRqjFwX/Hf8wHj41lpVfn0UaEauU+75S0LIlZ2jn:84aRqhwX3ND41TWUmh+75SoIPwn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eec67eb7c4edf79b36b5a0ac94f584d_JaffaCakes118
Files
-
2eec67eb7c4edf79b36b5a0ac94f584d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ