Static task
static1
Behavioral task
behavioral1
Sample
2e3e236a569c1b83ca903ef95f77806a_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2e3e236a569c1b83ca903ef95f77806a_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2e3e236a569c1b83ca903ef95f77806a_JaffaCakes118
-
Size
47KB
-
MD5
2e3e236a569c1b83ca903ef95f77806a
-
SHA1
15bbfbfaa19665eff051a24f742d2879cff90e76
-
SHA256
db39f377ad0f8d7adb2b99b0aa0a415e6f47b5543b69cdc91e45e8c6ba2a6346
-
SHA512
3803c3cb0419321e895ad5363d0679ea911671e6846dc5d35d46bc72cc6b0ed9a1f4d4061fd83574230bf0d42a2d92997377ac0f8f115f42c22a1ef91077599c
-
SSDEEP
768:7vQWdFL4BjRrIAOCNX3qefn2YTXYebPe9fnG8Wws1XHiOKvRKAMd:7VMBlBOCNXa82wX7e9fdXsgKAMd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e3e236a569c1b83ca903ef95f77806a_JaffaCakes118
Files
-
2e3e236a569c1b83ca903ef95f77806a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE