Static task
static1
Behavioral task
behavioral1
Sample
4bd0485a90846ab40ffc3e1091a0fe70_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4bd0485a90846ab40ffc3e1091a0fe70_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4bd0485a90846ab40ffc3e1091a0fe70_JaffaCakes118
-
Size
46KB
-
MD5
4bd0485a90846ab40ffc3e1091a0fe70
-
SHA1
3ad5d7966e9cbcbbfcd4994dfd58894e2f7cb9e3
-
SHA256
c0d9bd9dbb08b5b70e68fc3212dc4017c30e89192e828b3b389b7caaa243756c
-
SHA512
29c5723d5f2178c04b0a17e24dfe197adb7d08f736d9a416a195114e9edab4e65b8253f1c4ab084ea1c4439b1d5a94f8278534dcd735310a0425ebacb124addf
-
SSDEEP
768:QpS1cZ7UaJYUc8DXmmkzQ3Y4oXeh145M:er7UaxFTazayeh145M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bd0485a90846ab40ffc3e1091a0fe70_JaffaCakes118
Files
-
4bd0485a90846ab40ffc3e1091a0fe70_JaffaCakes118.dll windows:5 windows x86 arch:x86
d770e3b749b75caab4e4a5cc01d8299f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmUnmapLockedPages
ExAllocatePool
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ