Static task
static1
Behavioral task
behavioral1
Sample
3dfaae85a57245a2f580c76ea7778c88_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3dfaae85a57245a2f580c76ea7778c88_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3dfaae85a57245a2f580c76ea7778c88_JaffaCakes118
-
Size
14KB
-
MD5
3dfaae85a57245a2f580c76ea7778c88
-
SHA1
14191a2e138cc899d43381a792f107304fccf563
-
SHA256
25ad96a9fbb6fa9f42035944a77a7c7c89e9df4837661bb46ae6f28de9770be2
-
SHA512
f8c889dee2dfef08cfff73351dba592f57f727cd146f2e82444ac5a638e45559099990fb989eb09999ca60fe23f0b251b5be42ee8056288bc4907e7454c7409e
-
SSDEEP
192:7dH/mi1i1EMAbB9y4AO+sOaLTbNiuGExbBMkteA//4xneI6KF1I54pY/KXKn+bHD:7dH/HqEbB9gzsZTb0oQCWpC/Z+brX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dfaae85a57245a2f580c76ea7778c88_JaffaCakes118
Files
-
3dfaae85a57245a2f580c76ea7778c88_JaffaCakes118.dll windows:4 windows x86 arch:x86
affa5a48df497b23a13d7927d4c2c6af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
KeServiceDescriptorTable
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ