Static task
static1
Behavioral task
behavioral1
Sample
a150dc389cd243a907cc92473dfc5781_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a150dc389cd243a907cc92473dfc5781_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a150dc389cd243a907cc92473dfc5781_JaffaCakes118
-
Size
46KB
-
MD5
a150dc389cd243a907cc92473dfc5781
-
SHA1
045fd7e9b08b2d4cccb16897d5c0fb2c96cb7167
-
SHA256
599d33fcb981a5afff709ff808f472241f5453c7b3840033a5be66e959e758de
-
SHA512
f1ff49f12f6fc627ffe92f65fd9a7faf0d5a0671c8d34a02f23606820d6bbf06fc8b05b8368aaa44c5d2fc8b24da57b15fd2f81e3fdb4d642123f516d32c3adc
-
SSDEEP
384:QfU09opaJgyejEBaSNbmKk5vmCMaql/+ak6A9DHw/sC3:QHfJgRjunb+5vmPPl2gA9DHw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a150dc389cd243a907cc92473dfc5781_JaffaCakes118
Files
-
a150dc389cd243a907cc92473dfc5781_JaffaCakes118.dll windows:5 windows x86 arch:x86
b4e707e9acecd405bdd67065419b8250
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
ExAllocatePool
MmUnmapLockedPages
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ