Static task
static1
Behavioral task
behavioral1
Sample
14e6c88300fbc803f2a1bbdd8d140f4c_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
14e6c88300fbc803f2a1bbdd8d140f4c_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
14e6c88300fbc803f2a1bbdd8d140f4c_JaffaCakes118
-
Size
46KB
-
MD5
14e6c88300fbc803f2a1bbdd8d140f4c
-
SHA1
264114253e8bbfdd4385d4f509466ae16c7f93ae
-
SHA256
57a653afdb98438761f661c74eccda3754754a457eb00fbb1880bc3c4f021a66
-
SHA512
82dc0f971642950a99809947480b0cdab4aa4821ca1949f9184c97ef1fcb5d736819b05eeba0b4e1f20bf3269088bc0eff7cbe8c840e9b9dbfa280d0da67915d
-
SSDEEP
384:J6/X18y+Ixc2A3BE00/QP+5YrmC6A81ZVKkHEFtoOLycBAmvatXiFI0xbQbz7IWv:JOlJ+IS2AKD0TuoafmljxEbz7IWdOy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14e6c88300fbc803f2a1bbdd8d140f4c_JaffaCakes118
Files
-
14e6c88300fbc803f2a1bbdd8d140f4c_JaffaCakes118.dll windows:5 windows x86 arch:x86
d770e3b749b75caab4e4a5cc01d8299f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmUnmapLockedPages
ExAllocatePool
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ