Static task
static1
Behavioral task
behavioral1
Sample
b608aa7b2d3914170fac634fc3dca675_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b608aa7b2d3914170fac634fc3dca675_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b608aa7b2d3914170fac634fc3dca675_JaffaCakes118
-
Size
15KB
-
MD5
b608aa7b2d3914170fac634fc3dca675
-
SHA1
fec2a77fda0f72faac98d2b7df73c85e83a7c568
-
SHA256
f865eac6d241153a8b5b9d92e003c0cea5d3615ee3f710c6a3f34952409b9d79
-
SHA512
417712e6840bdd79070c5f6c524be64bab36a2658838ce1723eb32bf465412f5cc98e5b27591a47ae51d889954935772207f573f43b1788855ab5a604e36d566
-
SSDEEP
384:xw+95C1hB0YgCYVi+6tD5yDpdNjS6rav2racHoY4uTX:xlC1EYjH+6n0pPjS6OOecf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b608aa7b2d3914170fac634fc3dca675_JaffaCakes118
Files
-
b608aa7b2d3914170fac634fc3dca675_JaffaCakes118.dll windows:4 windows x86 arch:x86
5bb24032f0bce7473dda57c6e6b05054
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
ZwOpenProcess
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ