Static task
static1
Behavioral task
behavioral1
Sample
271b35cd87b1f7567f78f9c9f878e7a8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
271b35cd87b1f7567f78f9c9f878e7a8_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
271b35cd87b1f7567f78f9c9f878e7a8_JaffaCakes118
-
Size
180KB
-
MD5
271b35cd87b1f7567f78f9c9f878e7a8
-
SHA1
1f5a5a59c647db8ef7e7614c41811733de3b6528
-
SHA256
6a9059121f0abec3ddead8ab407a316cdd568617eb3212dc7ee5d7dcc60c1ce8
-
SHA512
b8ad90e3e8d340e90c143e7d1462544a99a5597e6d6ff5747055d0bcc4ca7c923373209e09f26dc1c92a8a5de72e49cbfcd9a52fd67b80f86a7be925621e7dc4
-
SSDEEP
3072:z9FrAi2zgD1P0JC6OmEVEBAiknvO3nLtQ9HNF:z9FrT2/mmEVUAic+LtQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 271b35cd87b1f7567f78f9c9f878e7a8_JaffaCakes118
Files
-
271b35cd87b1f7567f78f9c9f878e7a8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xrdata Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xdata Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ