Static task
static1
Behavioral task
behavioral1
Sample
88290d1d0b2886611501722a464fef1c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
88290d1d0b2886611501722a464fef1c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
88290d1d0b2886611501722a464fef1c_JaffaCakes118
-
Size
14KB
-
MD5
88290d1d0b2886611501722a464fef1c
-
SHA1
f6b0127dcba33c6945fa607701fc5a400cccbd61
-
SHA256
accdf2a5434ade3b7b4103f65a837dc935f942150fe84943ee663d267e1a04c0
-
SHA512
41fd52c8e47609845af07fca469c661939bbf14fea598b5ca38ea9f51470177d8c67597a744f9f58f74a836eaaca49fd4b056962b0d370776a36e8b9b38242a5
-
SSDEEP
192:B3tb96VCf4dClB/xYOmTqY6tZAYLBJkOa55ycI5sxe2/xOP1kr5Nb2YzrYzKrDX:Ba0C81mEtvLBuOZsxe2/xO9kdNBsgX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88290d1d0b2886611501722a464fef1c_JaffaCakes118
Files
-
88290d1d0b2886611501722a464fef1c_JaffaCakes118.dll windows:4 windows x86 arch:x86
3d6b0cd4217f57d5bfd16e3b85b29d57
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
memcpy
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ