Static task
static1
Behavioral task
behavioral1
Sample
b576a1cc702813f470cfa4516dc4279d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b576a1cc702813f470cfa4516dc4279d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b576a1cc702813f470cfa4516dc4279d_JaffaCakes118
-
Size
14KB
-
MD5
b576a1cc702813f470cfa4516dc4279d
-
SHA1
a4f5c5234df65bd57d95ba933a6b4e4f4be6b1c0
-
SHA256
38cb73bf548c40557dc89e15a40d07c71511184221b4b1aee12ca50de28d849c
-
SHA512
2c9728ad05f077b08ae809d30d87fef10859e3e76af4943a0cff2435a554cb8390c513ebe9ce0b1e1189e48dfd8f1c1680bbfdf485e151fb5b50fabc7613a27a
-
SSDEEP
192:8xGMyoAPG/pqYP/ozo8icsIoe3RYJYqSUgjkki2FSRpUjURTvki3Y+m72X09X:fPBYHe8BD+qtgjkkl39iI2iX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b576a1cc702813f470cfa4516dc4279d_JaffaCakes118
Files
-
b576a1cc702813f470cfa4516dc4279d_JaffaCakes118.dll windows:4 windows x86 arch:x86
fcd5f7ec7ebe87d39a03026308811842
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
ZwQuerySystemInformation
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ