Static task
static1
Behavioral task
behavioral1
Sample
fd2b3d090218e722ee7d70b9de41aefd_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fd2b3d090218e722ee7d70b9de41aefd_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fd2b3d090218e722ee7d70b9de41aefd_JaffaCakes118
-
Size
14KB
-
MD5
fd2b3d090218e722ee7d70b9de41aefd
-
SHA1
2e8f912a8e5c9d52df83242daeaa5a96d6a60926
-
SHA256
40180babd1d5d518d4671ee155a8580fce966c812f7368c3d268941cde213bc6
-
SHA512
e6f717642cfd91b1d306b96a9a574857c9f18c373df4f016b1bdbddae254af09f33149b517785af18c2e501c74b2943d40145851413ffa5c9151f5192f2812de
-
SSDEEP
384:wxkSYnrO+mQ4eEbKTTqdjnLA2dUPJVQOFD7cX:wx2/4eEbSqdrLIPJVQOlK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd2b3d090218e722ee7d70b9de41aefd_JaffaCakes118
Files
-
fd2b3d090218e722ee7d70b9de41aefd_JaffaCakes118.dll windows:4 windows x86 arch:x86
26e75848225ef0d8006738c221adee58
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
IofCallDriver
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ