Static task
static1
Behavioral task
behavioral1
Sample
82bd8420151bab1b4bc99bb698128c8e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
82bd8420151bab1b4bc99bb698128c8e_JaffaCakes118.dll
Resource
win10v2004-20240730-en
General
-
Target
82bd8420151bab1b4bc99bb698128c8e_JaffaCakes118
-
Size
46KB
-
MD5
82bd8420151bab1b4bc99bb698128c8e
-
SHA1
728ca7b008c1ec8f18cae81e85348f026ab53328
-
SHA256
19383bfbd06c461fa4cb71bd0b5f0da2720d13e332eb84274ed043d1e656bffc
-
SHA512
25d8b10c027b41d3e41df12e43fdb5119493b2a5f400076aa645ef5d540313f1c2da91e235ed5a87e295ae476c0a397f86f1f2ed2aa07e9d79341d48001ccb94
-
SSDEEP
384:mhvGu0dt10gHh0ZpojflvGkHAeArCbzkbrE5ebI8TjwoTU7RgsaPReCFb4Dp:a0dnbh0ZKJBYrWkbQ5oI8Ng7R41g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82bd8420151bab1b4bc99bb698128c8e_JaffaCakes118
Files
-
82bd8420151bab1b4bc99bb698128c8e_JaffaCakes118.dll windows:5 windows x86 arch:x86
b4e707e9acecd405bdd67065419b8250
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
ExAllocatePool
MmUnmapLockedPages
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ