Static task
static1
Behavioral task
behavioral1
Sample
ba06d8ca22c1ee8744becc1b870c541f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba06d8ca22c1ee8744becc1b870c541f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ba06d8ca22c1ee8744becc1b870c541f_JaffaCakes118
-
Size
15KB
-
MD5
ba06d8ca22c1ee8744becc1b870c541f
-
SHA1
e3b6c84fb785655f1c1571c166ee5d4867aa93ed
-
SHA256
c0ed84be6b24927880396cc1891763b36a371d114e98c6cbf8b84fa121dd0cd0
-
SHA512
dae8cfa703820bc705c9caf1f8b6214181058d994ab0fcf4a44d1ef0a1ab1cc1cb321957c475ddd1d8e5c6ceb9a8f84ad27b31e41f5811460e9a3752c264ea18
-
SSDEEP
384:9cM6w9xU30AocchyWdr/WP7rznGbxXFGp2X:64xU3v4Fl/m74x14c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba06d8ca22c1ee8744becc1b870c541f_JaffaCakes118
Files
-
ba06d8ca22c1ee8744becc1b870c541f_JaffaCakes118.dll windows:4 windows x86 arch:x86
5bb24032f0bce7473dda57c6e6b05054
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
ZwOpenProcess
Sections
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ