NtHideProcess
Static task
static1
Behavioral task
behavioral1
Sample
6068cec5782bc0d07f62120c84bf7d9f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6068cec5782bc0d07f62120c84bf7d9f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6068cec5782bc0d07f62120c84bf7d9f_JaffaCakes118
-
Size
6KB
-
MD5
6068cec5782bc0d07f62120c84bf7d9f
-
SHA1
11f3009f7d539c1aab48d98a7d04e33fb91c5eb9
-
SHA256
3c9602918f47457a82b90e58e3e8d920a2fb72a14e0e5f9ea4013f4ed82054fd
-
SHA512
af1e82f07997b42fd59276323c17de9e8e6036aa3af6b1726106d3d9a4276dc519bc94d357d8cb221611dc16f24ba8393fa741c27017d55e38ced348b2e9ad7f
-
SSDEEP
96:hAvzK97wsENTydaldv/vfCa0lVIyy3XxEB:KEwNdsaHv/+kx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6068cec5782bc0d07f62120c84bf7d9f_JaffaCakes118
Files
-
6068cec5782bc0d07f62120c84bf7d9f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 820B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ