Static task
static1
Behavioral task
behavioral1
Sample
27a8a211959d5b9785c42f72de945325_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
27a8a211959d5b9785c42f72de945325_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
27a8a211959d5b9785c42f72de945325_JaffaCakes118
-
Size
47KB
-
MD5
27a8a211959d5b9785c42f72de945325
-
SHA1
d7e2605b2213902ebee78014c0bde0100227b887
-
SHA256
cf6912f5ccf610c4f32f73abf529bec118be03b0a5a0e0205bb111433ace96bb
-
SHA512
08e067505a73d8d96d71f7ee3481cb1be9e9dadb978ba9ef854f1b6ddc6ebb005b74533fc68adc50e8851bbc6f852cbc7694ef03d7fdfa9b7a4c47e64fba80d5
-
SSDEEP
768:qmpM8peLohboGvEHATCjMAWGJM2IAHlyCX/oqv0XV3Yb3wzESn+RQSGhBkCMqb8:qaHoHuCj/Wfg/v0XBegDJSGUiI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27a8a211959d5b9785c42f72de945325_JaffaCakes118
Files
-
27a8a211959d5b9785c42f72de945325_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ