Static task
static1
Behavioral task
behavioral1
Sample
48fdde3d3911b2d5a2e02b87e4cb7355_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
48fdde3d3911b2d5a2e02b87e4cb7355_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
48fdde3d3911b2d5a2e02b87e4cb7355_JaffaCakes118
-
Size
46KB
-
MD5
48fdde3d3911b2d5a2e02b87e4cb7355
-
SHA1
29a72b74d860d8a9253e214b30694edc7c0f2b0c
-
SHA256
1b3da494df1de9ce6d4bf31ca1cf4b2d1cb03876abe1d426fccf2ca36bab3e1b
-
SHA512
3763c45504a72ffd6afd9f189b4ede92916096a0cc359194e5fd7107a2362f388a3eaae8cd670abbdd17b88ca913d8dd7915b2db02d0f568a4f3229fdfa84550
-
SSDEEP
384:UFnV73LiHl69g4ulz7mneyhxPcHTizZadRd+FwGIHv9j9EtN9:unVDG49gD7mxhaaadRjGIHTEB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48fdde3d3911b2d5a2e02b87e4cb7355_JaffaCakes118
Files
-
48fdde3d3911b2d5a2e02b87e4cb7355_JaffaCakes118.dll windows:5 windows x86 arch:x86
5ddda65e099164f5ee31a654c36edb23
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
ExAllocatePool
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ