Static task
static1
Behavioral task
behavioral1
Sample
272e929f46f38902e4b2ef63c2d86a33_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
272e929f46f38902e4b2ef63c2d86a33_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
272e929f46f38902e4b2ef63c2d86a33_JaffaCakes118
-
Size
207KB
-
MD5
272e929f46f38902e4b2ef63c2d86a33
-
SHA1
5c5c83f6d3ff5a21594695943c2d0246a9214681
-
SHA256
62b5dd8603759feaf3fc0f6847abc2b4de2fa0ee5403c6dba9aea19d86b0a95e
-
SHA512
abe2851f58592c46938e88896b4fddc107178435b934c4f00d543a253efb37f79f3c41fd17c80851058821a30d2ee3d6595a37a9b564e5bc2d5fff3d49d00201
-
SSDEEP
3072:slw0pZscXtVgk9jKDIoL73A9+r0fFCF9ecpDeqJWBcQ5nVzZ/nhYL9:v0pZ3XtVpjHS7K0qcleqanVhh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 272e929f46f38902e4b2ef63c2d86a33_JaffaCakes118
Files
-
272e929f46f38902e4b2ef63c2d86a33_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
CODE Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ