ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
2e60fb498864f9b05c3513ac036a85f7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e60fb498864f9b05c3513ac036a85f7_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2e60fb498864f9b05c3513ac036a85f7_JaffaCakes118
-
Size
120KB
-
MD5
2e60fb498864f9b05c3513ac036a85f7
-
SHA1
edabd2208eba39d75d9436d756e0085c8b099b4b
-
SHA256
2d0e3197db149c6796e51f4cd879b69e5c5690580fae1f03a0d40885123203ea
-
SHA512
e139e0dfeeb0bc864cd68c1d0d706f3a4c05556a9daa4a04d893deddfee8b41930f58659dc8e197e613c7aff529db2c7f5e6f449896b523dcc7a0a10a18b7950
-
SSDEEP
3072:3zQMoF1zXN0QZZV8a2jJmaXn74d1i8kIL/HBM/mkgq1T:spN0QZxiH74Hi4HBLkgq1T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e60fb498864f9b05c3513ac036a85f7_JaffaCakes118
Files
-
2e60fb498864f9b05c3513ac036a85f7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE