Static task
static1
Behavioral task
behavioral1
Sample
3533c6d28c4ccbabe0b03252a1d2ae2a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3533c6d28c4ccbabe0b03252a1d2ae2a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3533c6d28c4ccbabe0b03252a1d2ae2a_JaffaCakes118
-
Size
15KB
-
MD5
3533c6d28c4ccbabe0b03252a1d2ae2a
-
SHA1
1b846ec0a658f2bc99834a28e27cfa93cb45ccd7
-
SHA256
f1723e770609578a8de2e248a086117eda3aa357632ea806d374e8b115c94430
-
SHA512
9c0634687beaec514cd22b5bf1ce5dd5ef80602b8941d22b2679e8fc76640b56847b0b2991e4dc2334faa564d400917f8e7719608cb9371bc26f6f6ba430caf9
-
SSDEEP
384:8/gSp5fYn87BBVlTYxyPNzonEX8UkKo7X:8rRS8tB7Yx0X8UToz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3533c6d28c4ccbabe0b03252a1d2ae2a_JaffaCakes118
Files
-
3533c6d28c4ccbabe0b03252a1d2ae2a_JaffaCakes118.dll windows:4 windows x86 arch:x86
dc7a147f748bbb85a01fecf840caafcc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
PsLookupThreadByThreadId
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ