Static task
static1
Behavioral task
behavioral1
Sample
a8bc27eb9b0e3e682258fa6418147e57_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8bc27eb9b0e3e682258fa6418147e57_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a8bc27eb9b0e3e682258fa6418147e57_JaffaCakes118
-
Size
313KB
-
MD5
a8bc27eb9b0e3e682258fa6418147e57
-
SHA1
92e27f2a45d650727829604e669a95fb1406baef
-
SHA256
9bb04187fc58ea0b3bdd9a99705fb723317f4b94b499c89163e3b41defcc01cc
-
SHA512
f8b258038bb02d51157b88104c76ca15dda53f928b61756f93f53c0da731af0d14e7fa76863efd35fd568538cd4378f616aa95c90039c608406238829b006c03
-
SSDEEP
6144:vHDJs874cECMvSRxwHK7spgQTOPy1Ke5WOhcCF+AMyuPLbiMeQi3FyF7uD89mMdM:vHDbzEVSkHbTOPG/F/6LbRF7uD8hdM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8bc27eb9b0e3e682258fa6418147e57_JaffaCakes118
Files
-
a8bc27eb9b0e3e682258fa6418147e57_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 223KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE