Static task
static1
Behavioral task
behavioral1
Sample
2ef8f669aa38ff7fbdc691e6340e1b16_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ef8f669aa38ff7fbdc691e6340e1b16_JaffaCakes118.dll
Resource
win10v2004-20240708-en
General
-
Target
2ef8f669aa38ff7fbdc691e6340e1b16_JaffaCakes118
-
Size
10KB
-
MD5
2ef8f669aa38ff7fbdc691e6340e1b16
-
SHA1
8b5f12fea440d9564bb5b79c0114bee9c43a8e92
-
SHA256
2b5bb29916320f24723e0a0b9a9a861de41a622d601050dac0457958efa308d2
-
SHA512
10c514df89efb062218a18fa450c93906f37630fbe4921b45b767acce373e513a8f4d45b7821cdd9e90217f48f5b3d33bd3e0f9d9358980b4fbe0244b8908199
-
SSDEEP
192:TSb7i9a6tTpKDAR3lARvMnoEfBRnrFzqBQo/ryZQOrtsrLjheOX:TSC9/IiiE7rF+BQognpsgOX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ef8f669aa38ff7fbdc691e6340e1b16_JaffaCakes118
Files
-
2ef8f669aa38ff7fbdc691e6340e1b16_JaffaCakes118.dll windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ