Static task
static1
Behavioral task
behavioral1
Sample
2c1d4b0c7513d58e079ffc933253b8af_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c1d4b0c7513d58e079ffc933253b8af_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2c1d4b0c7513d58e079ffc933253b8af_JaffaCakes118
-
Size
314KB
-
MD5
2c1d4b0c7513d58e079ffc933253b8af
-
SHA1
ca953109f78f4d7a7c97ec243a1876ed73f80cb7
-
SHA256
fc488eadf825cced71265f46ce6a87375259eeaae562e76b8ac610c2b2a1a3c6
-
SHA512
b5d70fa24d25ab9c032a509195b90ceac15afaff5fb9acf4e30e94dae66b7a0e4f10cef1711875b115e14d5c43a4895a27cb6ed57d6f43883fb36049b0556c44
-
SSDEEP
6144:HF+n2gGTnNPBjEnZy58m/2RbpBRKUPG6lS1a/9kABjP8qEQOepwOWaB:HstGDV2CGbNKalS1QkujUbQZptWaB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c1d4b0c7513d58e079ffc933253b8af_JaffaCakes118
Files
-
2c1d4b0c7513d58e079ffc933253b8af_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 177KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ