Static task
static1
Behavioral task
behavioral1
Sample
b908a043c6ff032f2190da602b2286f8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b908a043c6ff032f2190da602b2286f8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b908a043c6ff032f2190da602b2286f8_JaffaCakes118
-
Size
46KB
-
MD5
b908a043c6ff032f2190da602b2286f8
-
SHA1
c1dd24ab8d070b3e75569b16525fcd3ff3bfb313
-
SHA256
499ec6292c69c4b18e15d2b5f3c50f557d9ea81eb3fd94a01c51b0339d829faa
-
SHA512
c68f37b1811f99fc9b163ee2881324ac38108f13e7f281a5b1e50583398f0c2fda7d1ff1df19b25d4af1e474da3b57c980e27ffc0d089df0b64e045147e355fb
-
SSDEEP
768:7QQ+6+rS+JY1BSSpdtu+nswUnE9QnYZBDX:sQwkpLuUsPnOQGBb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b908a043c6ff032f2190da602b2286f8_JaffaCakes118
Files
-
b908a043c6ff032f2190da602b2286f8_JaffaCakes118.dll windows:5 windows x86 arch:x86
6e20299413b2bf0e99270ef3fc39aaf0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
IoAllocateMdl
ExAllocatePool
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ