Static task
static1
Behavioral task
behavioral1
Sample
9522c802b7a22af219c1ea6763e80bc4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9522c802b7a22af219c1ea6763e80bc4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
9522c802b7a22af219c1ea6763e80bc4_JaffaCakes118
-
Size
46KB
-
MD5
9522c802b7a22af219c1ea6763e80bc4
-
SHA1
6ad93fcc8077d14bc179636d1ef6dced8cdfce82
-
SHA256
90b575e7b2e03376647af82305ee28ea520c1c757141c298cb995b781af4de09
-
SHA512
9067dc0c2c6228c48529aab19634236d70393d02d375eeca5cdbf5f0de457005f5a4a3000e2899ba41842c5ef714aafd892e8ac5f0d7dad7d784e6e30f0ce87d
-
SSDEEP
384:gsxwhEfI3Qm6ouhg/yGKVEH/wdz+rlfcEjPBMNzyKfY3FqfjcJoH:PxwCh8ICH/wdzSlfPoWKfY3Fqfg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9522c802b7a22af219c1ea6763e80bc4_JaffaCakes118
Files
-
9522c802b7a22af219c1ea6763e80bc4_JaffaCakes118.dll windows:5 windows x86 arch:x86
d770e3b749b75caab4e4a5cc01d8299f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmUnmapLockedPages
ExAllocatePool
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ