Static task
static1
Behavioral task
behavioral1
Sample
b27fcd67688e86143d93d9b79549eb33_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b27fcd67688e86143d93d9b79549eb33_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b27fcd67688e86143d93d9b79549eb33_JaffaCakes118
-
Size
31KB
-
MD5
b27fcd67688e86143d93d9b79549eb33
-
SHA1
10eb2d8084e38f715db929d1d906203eae7f3d54
-
SHA256
bda94a03edf3f028910d9d62c2267987fc607bc10c1eb55ec0e9f3021f842b0b
-
SHA512
2b9a0e89f0568f58e28f510d76e42a78df38ef4f6be4bd106f6eb2408703a84d4b76cf4984831a7acfa2a871a499be4c13977064ccffbc7d0e312a8c23dca45e
-
SSDEEP
768:VIEFNHYQpjH38L5BMGifhSigm1VJ8j9NrTVx6ojPnqJpVCt:VpPLMFBDifvzJ+PrOojPqJSt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b27fcd67688e86143d93d9b79549eb33_JaffaCakes118
Files
-
b27fcd67688e86143d93d9b79549eb33_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
c25h Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ave2 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lg2 Size: 984B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE