Static task
static1
Behavioral task
behavioral1
Sample
87360740d9f1098894a5092ef06b4e68_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87360740d9f1098894a5092ef06b4e68_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
87360740d9f1098894a5092ef06b4e68_JaffaCakes118
-
Size
46KB
-
MD5
87360740d9f1098894a5092ef06b4e68
-
SHA1
dc4b4cadfb4b9613bb6fe2f5220043209820e972
-
SHA256
490c2c323f8760d2c78b15524f734d00933d2f730652f63cc8077dc90f1524d2
-
SHA512
747f83507f89701034f960f357b15266dc7b83622720ec41f56c3ac602c32621ae17c9462094b17218849d290d909407ea9ec42324313a9c3650ddc26d09d253
-
SSDEEP
384:3IUY/SG0E+BwpZGKP0mO+C6IxdxzMvFNy/LcUaG2zWLs4Jbyk17W3:3a/SGd+Bw7OkCxzMvFN77WLlf17
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87360740d9f1098894a5092ef06b4e68_JaffaCakes118
Files
-
87360740d9f1098894a5092ef06b4e68_JaffaCakes118.dll windows:5 windows x86 arch:x86
d770e3b749b75caab4e4a5cc01d8299f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmUnmapLockedPages
ExAllocatePool
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ