Static task
static1
Behavioral task
behavioral1
Sample
27cea1c05bcc96961f7fa925aad892d4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27cea1c05bcc96961f7fa925aad892d4_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
27cea1c05bcc96961f7fa925aad892d4_JaffaCakes118
-
Size
10KB
-
MD5
27cea1c05bcc96961f7fa925aad892d4
-
SHA1
f0b410ca9c311fe3d62e2a7c2463bf544559e456
-
SHA256
d2849f6b33b4a9ed3d55fd040a08a30c61b02d7a32cd08cd3a5adf7ae264c0bd
-
SHA512
90736f081346f6b3b5e88759c6e67d3809f7d05be1efc6e2796e6b04bf7511d2bf7a19f8e362e7a27746b4312783e0a6a5a9b7315c40a0b92ebfc22d91c8c6f1
-
SSDEEP
192:HKn+aXlGS25pEU6udcbeGD8xxAqAuZnCrCN:qL0LQxgxFVCk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27cea1c05bcc96961f7fa925aad892d4_JaffaCakes118
Files
-
27cea1c05bcc96961f7fa925aad892d4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.code Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE