Static task
static1
Behavioral task
behavioral1
Sample
4c185e61558714a170cad0963bfca629_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c185e61558714a170cad0963bfca629_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4c185e61558714a170cad0963bfca629_JaffaCakes118
-
Size
46KB
-
MD5
4c185e61558714a170cad0963bfca629
-
SHA1
3f896c1e21e6b864c4852b7b9e6959a03b9b9c1b
-
SHA256
90f763ea42657e90ca13f7e4c650406920e082fbc7877f3bb1a14d561dd00d0f
-
SHA512
3bd33f348df6540bb005b4762835807c8772ca2636797558b08acc66de3d16b6af37efda867db9a034bb05d199d9e21907c477eb47efec69a51eb77f0f545a3d
-
SSDEEP
384:r2AJ3g32LzXvI/8EMn5mo86MpUN9UZ3amwjp1107mAMNFEBUSf:r2m3gu/I//Mngo86M6YaHtr07m9EBt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c185e61558714a170cad0963bfca629_JaffaCakes118
Files
-
4c185e61558714a170cad0963bfca629_JaffaCakes118.dll windows:5 windows x86 arch:x86
d770e3b749b75caab4e4a5cc01d8299f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmUnmapLockedPages
ExAllocatePool
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ