Static task
static1
Behavioral task
behavioral1
Sample
86a2a61709be5d96fb21a34ea514f440_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
86a2a61709be5d96fb21a34ea514f440_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
86a2a61709be5d96fb21a34ea514f440_JaffaCakes118
-
Size
46KB
-
MD5
86a2a61709be5d96fb21a34ea514f440
-
SHA1
757fa7372f9ec16a90bd554a2fdbd990d5fee63a
-
SHA256
18a85b941f706eb4a131426c26849a757edc005920b2217a7cecbb2c13f90353
-
SHA512
e5423e1cb5b5dda5169bafc5dc74698fd051bba51596a5150639904674170ee652911deaee01619c19be1fdbd3cc40f5217862ab25ad9dba0374b2a873a2901c
-
SSDEEP
768:ojvMs+j5fjq4KLcwxQkGaXY9XZ5Bla0fkZow:ojvbEB3GekGaoRawk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86a2a61709be5d96fb21a34ea514f440_JaffaCakes118
Files
-
86a2a61709be5d96fb21a34ea514f440_JaffaCakes118.dll windows:5 windows x86 arch:x86
b4e707e9acecd405bdd67065419b8250
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
ExAllocatePool
MmUnmapLockedPages
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ