Static task
static1
Behavioral task
behavioral1
Sample
27bc08a666cecf969183bde4ba3372d9_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
27bc08a666cecf969183bde4ba3372d9_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
27bc08a666cecf969183bde4ba3372d9_JaffaCakes118
-
Size
60KB
-
MD5
27bc08a666cecf969183bde4ba3372d9
-
SHA1
a40147a04335a60042186400602a0584f1247484
-
SHA256
1dff465e2d1c22aa66ee1da096e3f293168cc974d788037bbde964bd3c22649d
-
SHA512
3afd75aa9d56e7d85dd6e01a95c9b78dbbb438806d507236d668b99131252b71f3e310c7b08816c27786218049bea191ec73ea8cc90c87101427c53c49eaa58c
-
SSDEEP
768:2HddP4+rPACV2YsyPSPwjcoA0Axo1nVuzC26aN1+DE+O6vFfGryIiCbJa+6YzjqX:2jP4kI+syPBC07wm9aNcRO6efJI65ry
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27bc08a666cecf969183bde4ba3372d9_JaffaCakes118
Files
-
27bc08a666cecf969183bde4ba3372d9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE