Static task
static1
Behavioral task
behavioral1
Sample
2d1e9e73ffdc4c5a4ee070b5c70c52b0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d1e9e73ffdc4c5a4ee070b5c70c52b0_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2d1e9e73ffdc4c5a4ee070b5c70c52b0_JaffaCakes118
-
Size
525KB
-
MD5
2d1e9e73ffdc4c5a4ee070b5c70c52b0
-
SHA1
f1858076919b567130063c45a67e26605e3ca16b
-
SHA256
0f25e3120a2f406daa5f7146433a46479461f6b281420ca1becc56d19bb9c45c
-
SHA512
cc9136531561cfa1d1edec6c9024bce198a82ec21997e5e3c0f31de91b1ffdb7ae394608cbd2825a6826d3c0793c4f9519eba63d685ca60dfd699926cf41158b
-
SSDEEP
768:9u1GWc4wf6Dn9/MdcW4kjAFty2RkxU6aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaY:Ew36zOAbLkxUci
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d1e9e73ffdc4c5a4ee070b5c70c52b0_JaffaCakes118
Files
-
2d1e9e73ffdc4c5a4ee070b5c70c52b0_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ