Static task
static1
Behavioral task
behavioral1
Sample
2d5282e1827c83fb81a0be90ff4d5260_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d5282e1827c83fb81a0be90ff4d5260_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2d5282e1827c83fb81a0be90ff4d5260_JaffaCakes118
-
Size
968KB
-
MD5
2d5282e1827c83fb81a0be90ff4d5260
-
SHA1
74121692fd076e9066ee4b57b7bc0cf815e23787
-
SHA256
720d9210978a8675ba29b723e1c18ee85fddd36cec25b8f67a06e4175bdfde99
-
SHA512
a43f355431d7a452208a697f5d74463f0e359d7a41c006f66d779893866eaa87dcfc20faadd6953ab19a52f82772419678a990c568688b9f402f183ab7b73c69
-
SSDEEP
12288:+j1aV1RY7iqxgYjG8ACv+0KhpsJZRXH52LMcg5nN:+seGWGYvTisJZdZ2wZ5N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d5282e1827c83fb81a0be90ff4d5260_JaffaCakes118
Files
-
2d5282e1827c83fb81a0be90ff4d5260_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 300KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 642KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ