Static task
static1
Behavioral task
behavioral1
Sample
5e0dc72f734e514199ad1a1f2a497c39_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e0dc72f734e514199ad1a1f2a497c39_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5e0dc72f734e514199ad1a1f2a497c39_JaffaCakes118
-
Size
46KB
-
MD5
5e0dc72f734e514199ad1a1f2a497c39
-
SHA1
0f904d30624610df94cf11e2ebc2071bb08f66ec
-
SHA256
d30b3eee02284d7250f73b5efa04e63c7384790b1f7525991e75092f6e0186ae
-
SHA512
90114f99279534d086da3c96b76e6aac39fb967e4c09a340861906311e6ccad63417141139fd8f7b69dce79419f33723e08dd6611abbd1d61e4a95eb6aae378a
-
SSDEEP
384:/pvKIj+jqJUTkq7Exz2+QRBKDa/r6xQXbtWc89Ts18zM3/26AsTpKS8oCsz2IpI4:oW+TEZ2+tDX0bthWseIvjNr1Ccqx2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e0dc72f734e514199ad1a1f2a497c39_JaffaCakes118
Files
-
5e0dc72f734e514199ad1a1f2a497c39_JaffaCakes118.dll windows:5 windows x86 arch:x86
d770e3b749b75caab4e4a5cc01d8299f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmUnmapLockedPages
ExAllocatePool
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ