Static task
static1
Behavioral task
behavioral1
Sample
2c412ddc61dc6bf2a209e9530fd676b4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c412ddc61dc6bf2a209e9530fd676b4_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2c412ddc61dc6bf2a209e9530fd676b4_JaffaCakes118
-
Size
102KB
-
MD5
2c412ddc61dc6bf2a209e9530fd676b4
-
SHA1
2901a55da9c789331fa8bfe4c55d562a5f0d11c6
-
SHA256
b8b1093b71990210f8eebd709b6f57e311121d068cfeaff10071608eb5c6f03e
-
SHA512
b923d35c024371d8b451d199bbf93e22d2c8674bf36cf822f063eb3fd8163795f438fc5f181ea2efd240a7de8afc0094eeaf6c0f714e2bc6dcd71de140aad63a
-
SSDEEP
3072:18E1Hso6zyUuCGQWWWBJkTL1KXcIYPAKxpoS8:6sv6xMQzWB4L129YPA88
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c412ddc61dc6bf2a209e9530fd676b4_JaffaCakes118
Files
-
2c412ddc61dc6bf2a209e9530fd676b4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.none Size: 97KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.none2 Size: 512B - Virtual size: 350B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 224B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mnon Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ