Static task
static1
Behavioral task
behavioral1
Sample
0d354c7c37b56e9340481f28fea68a8d_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0d354c7c37b56e9340481f28fea68a8d_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
0d354c7c37b56e9340481f28fea68a8d_JaffaCakes118
-
Size
46KB
-
MD5
0d354c7c37b56e9340481f28fea68a8d
-
SHA1
83c393e73d75c6080dcadf105a515b9948ffd141
-
SHA256
4211f98b84db2ba95f5d74540e6832122be2538fe787653876cae315aede86a7
-
SHA512
b1f826387784ec88900d27d659b9579d0cc6b6ec96bfb4c11d346998d866be83b7e6eff9b110742e5805b5acf4f18a90a855c807f5b8ba6625abe0e20ee010d7
-
SSDEEP
768:UMckMK8zWyK/tMYfOd25/l8XWa2rrTeuQp0gO:UMYWffZ3vmuQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d354c7c37b56e9340481f28fea68a8d_JaffaCakes118
Files
-
0d354c7c37b56e9340481f28fea68a8d_JaffaCakes118.dll windows:5 windows x86 arch:x86
d770e3b749b75caab4e4a5cc01d8299f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmUnmapLockedPages
ExAllocatePool
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ