Static task
static1
Behavioral task
behavioral1
Sample
27939cad462c4864b078eadd4fc7f901_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27939cad462c4864b078eadd4fc7f901_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
27939cad462c4864b078eadd4fc7f901_JaffaCakes118
-
Size
745KB
-
MD5
27939cad462c4864b078eadd4fc7f901
-
SHA1
ad6b5da11d755224c559a9ceaf9aa5527f6c9d16
-
SHA256
c0dd408e1c2b8a7a34deedea4014e179f79262962cf6a393ea8523e794292b5f
-
SHA512
2c1e739e4851f1271d5aa54328c9e623da4eeea7075248395a1a50418f4e1e0c824f0aade3a4dd0d85d89dc20ba411dbf153b9eddd5c610d37e3ea0ffc7d75d2
-
SSDEEP
12288:/qsRJIlfn/Nzpav4lSq8rqhn7CRQEu3cNtGFLCitUEfgTML:/dROf/NzswQqLx7gQEuMGhCiek1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27939cad462c4864b078eadd4fc7f901_JaffaCakes118
Files
-
27939cad462c4864b078eadd4fc7f901_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 540KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE