Static task
static1
Behavioral task
behavioral1
Sample
2fa5e701761fbb5e5355a134bdab0853_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2fa5e701761fbb5e5355a134bdab0853_JaffaCakes118.dll
Resource
win10v2004-20240708-en
General
-
Target
2fa5e701761fbb5e5355a134bdab0853_JaffaCakes118
-
Size
59KB
-
MD5
2fa5e701761fbb5e5355a134bdab0853
-
SHA1
7413f3a886e125ed21ee5541cccf1b408de93c65
-
SHA256
f3dacb04e8387a15c42be31fe97aefeb09194bae2f32082f1662aca6664edc6e
-
SHA512
24d9cf42e707ae2fb9537a57495b573f3375ee01aec8d1b27c53cfc511ba6b6b93aa59e16a7e2dc3534badb4a4b7d4c82a12d37d37e2c6973cfa3dcc8dde6e43
-
SSDEEP
1536:oPJYkPHIL2lXCXAqz9IkcCCdjraMhWGPZOYfTa/:SJJHESZMGPZhfm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fa5e701761fbb5e5355a134bdab0853_JaffaCakes118
Files
-
2fa5e701761fbb5e5355a134bdab0853_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
uzdssxe Size: 860B - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tols Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE