Static task
static1
Behavioral task
behavioral1
Sample
2fb83f6344c5f96bcb8ccc4837993907_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2fb83f6344c5f96bcb8ccc4837993907_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2fb83f6344c5f96bcb8ccc4837993907_JaffaCakes118
-
Size
129KB
-
MD5
2fb83f6344c5f96bcb8ccc4837993907
-
SHA1
80ee5e7733eeec0c07de01a40a5faea809d41345
-
SHA256
6fbf96290884b2eba2e89b02da674f0ad4a2e281ee018bab513510d031f2bc3b
-
SHA512
a013f958a3e6aa9e389360b929c7c60e8dddb0bf9fe73f45ae24ad453d534604dc4ead7ddb6d5fe7a0db8470db2efa089e252929f9ca6723ef6378c71fac25b1
-
SSDEEP
1536:zEi8ADdfggoCBBROogXfANie7zEzCHOC0A2mNj/MPLPiLyEnlZTvQTqjwkw:Ai8A5fgVCszXIR0LC0A2mNkPL9ewr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fb83f6344c5f96bcb8ccc4837993907_JaffaCakes118
Files
-
2fb83f6344c5f96bcb8ccc4837993907_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 79KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ