Static task
static1
Behavioral task
behavioral1
Sample
18e2e77eaa00cc7c36623f5dfe4475ac_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18e2e77eaa00cc7c36623f5dfe4475ac_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
18e2e77eaa00cc7c36623f5dfe4475ac_JaffaCakes118
-
Size
14KB
-
MD5
18e2e77eaa00cc7c36623f5dfe4475ac
-
SHA1
733f15cda81664f5a46dc9abfa3ec193ed40c355
-
SHA256
d219e5e248fb8ab2331139755bd16d0c9c2709b32b5742331aa7f6acb39f7db3
-
SHA512
e7d5fa82edc86e5580fa84add565ca139b07404bbf1fe8031b7a1d6cf971206b7256262299990ba0de18ecb356c43390a99cbf7e6aa60af7c3a060b92665a511
-
SSDEEP
384:RrB4yorYLv1vNxyw6C8eIoa7ZjCImXp/kKLy1IX:RdIYZ/BVaVuh/GQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18e2e77eaa00cc7c36623f5dfe4475ac_JaffaCakes118
Files
-
18e2e77eaa00cc7c36623f5dfe4475ac_JaffaCakes118.dll windows:4 windows x86 arch:x86
5bb24032f0bce7473dda57c6e6b05054
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
ZwOpenProcess
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ