Static task
static1
Behavioral task
behavioral1
Sample
8b52bb0b17ace41c02134822f2cd655b_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8b52bb0b17ace41c02134822f2cd655b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8b52bb0b17ace41c02134822f2cd655b_JaffaCakes118
-
Size
46KB
-
MD5
8b52bb0b17ace41c02134822f2cd655b
-
SHA1
a178a6e31092c09da1f68ceb776dd1c13400267a
-
SHA256
41d28f1bfee597e1719cba7fb27750ad6142977e3a1e7eed7ef5235ab6ce2b3e
-
SHA512
075f47e60a1155111e6a45afd600412d7cb7ca50d426cd3ab673e76131eb9d72b164b2aa8aa236441218dc5148e7f6b40eaaac54ad52c50e79069109f220ab4b
-
SSDEEP
384:6BzivgQWEDznc7OP86cgESt0ZfMSn5QD2CJtwOGiWS3wjcqyE9VHUOC:6tivfj6UvpEq0NveJSiWS3wjyE1B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b52bb0b17ace41c02134822f2cd655b_JaffaCakes118
Files
-
8b52bb0b17ace41c02134822f2cd655b_JaffaCakes118.dll windows:5 windows x86 arch:x86
d770e3b749b75caab4e4a5cc01d8299f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmUnmapLockedPages
ExAllocatePool
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ