Static task
static1
Behavioral task
behavioral1
Sample
2fae58834f3754ac5e5a6724455c6ab6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2fae58834f3754ac5e5a6724455c6ab6_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2fae58834f3754ac5e5a6724455c6ab6_JaffaCakes118
-
Size
48KB
-
MD5
2fae58834f3754ac5e5a6724455c6ab6
-
SHA1
7d71d1a026a63457653575abc55117c674cb2180
-
SHA256
1d96c06fc60a4bf281e89703dcb6552a313c82bca95d88f4c4449ec4c058f937
-
SHA512
1ba3891c9514ccc2e92869b5692f31238bd6a16621714d6b76cef11312281b596e155f1516e7ed47e3287c97bd34290f5a125ee70ab270df1b9bd85ce306d16e
-
SSDEEP
768:43niZqZQ7LHwz6h00N8TRI9u4atDQ2cv+HGOjEPyyx4ptydx+xvD8x:43iZqZQ/+2STB4aK+mOAqtqkxvwx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fae58834f3754ac5e5a6724455c6ab6_JaffaCakes118
Files
-
2fae58834f3754ac5e5a6724455c6ab6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ