Static task
static1
Behavioral task
behavioral1
Sample
8c9ac8f558c03bcd9ef09292c19f450f_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8c9ac8f558c03bcd9ef09292c19f450f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8c9ac8f558c03bcd9ef09292c19f450f_JaffaCakes118
-
Size
46KB
-
MD5
8c9ac8f558c03bcd9ef09292c19f450f
-
SHA1
3e4f7a033eb71987b87fa1491ad2bc1c208f164d
-
SHA256
964de5d7be44217572ba62016db801ed60530b1ebfaeb08648d575013b2d8e13
-
SHA512
0ab2c3edb5da141e52ee1ac52435017d1c21c0e343712a47a53c8e1464c79ad5a8b9c9160713a7b1461d65a38139064768a493c74026942679d8f90e052341ae
-
SSDEEP
384:TcP45JrvAw7RvaM4+gDZ+92e3cCS6fZyg1EVK0i37nCa5laVsnJRrVl7UJiaKa:g4L/vDUgcxIwBIrCa5laVsjLQgl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c9ac8f558c03bcd9ef09292c19f450f_JaffaCakes118
Files
-
8c9ac8f558c03bcd9ef09292c19f450f_JaffaCakes118.dll windows:5 windows x86 arch:x86
b4e707e9acecd405bdd67065419b8250
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
ExAllocatePool
MmUnmapLockedPages
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ