Static task
static1
Behavioral task
behavioral1
Sample
e8031317a290e867ab182c5c2fb30210_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8031317a290e867ab182c5c2fb30210_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e8031317a290e867ab182c5c2fb30210_JaffaCakes118
-
Size
14KB
-
MD5
e8031317a290e867ab182c5c2fb30210
-
SHA1
ae25f3895b5b1a505dc9b53a1adacd5ad711601d
-
SHA256
cc52db3e2f552b11d490418b122e2f021c2c3b49718f7f79fea4a597fd6b9600
-
SHA512
b7f4bde2a39772b2a10a82df4dec9ddc575b802a20e388561ed103158fef08fbb9515fcd4f1016a41bb3188180fafdafdb792dc44b5bea69c58c43c3064dc6b4
-
SSDEEP
384:587svmo0RLAIwZBuIKqTbWyKStes3lPGo1Urhme0wxX:o+mDFZwCqTqyK4N1PHGFm1wR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8031317a290e867ab182c5c2fb30210_JaffaCakes118
Files
-
e8031317a290e867ab182c5c2fb30210_JaffaCakes118.dll windows:4 windows x86 arch:x86
42a7d086cf49638242010a9be78d45e2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
KeUnstackDetachProcess
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ