Static task
static1
Behavioral task
behavioral1
Sample
ba7475ed5cd9c61cb85181724ca5d096_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba7475ed5cd9c61cb85181724ca5d096_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ba7475ed5cd9c61cb85181724ca5d096_JaffaCakes118
-
Size
46KB
-
MD5
ba7475ed5cd9c61cb85181724ca5d096
-
SHA1
7f8c178772931d52417a1403562063cb91d7f698
-
SHA256
ce54e49a89e0fd3fed7af16d6a40adac15d4bf44f4e8c8688a92dcd3a77812c6
-
SHA512
0a2461c6e8877656ac9f45d99e51041f72d7c6bb8755449852200c101051ecad5b147e1fcac163000db86be24e38016e5236e24d4dc631043d64047d29ac6e87
-
SSDEEP
384:IPZcC8WgoeA9NPMrUn76738pVHTILVH2Tbamp4v3ineYu0eSIK9vxUG5jOyOxw:wRKopbr7673aVzIx26w03KHv9JD18m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba7475ed5cd9c61cb85181724ca5d096_JaffaCakes118
Files
-
ba7475ed5cd9c61cb85181724ca5d096_JaffaCakes118.dll windows:5 windows x86 arch:x86
d770e3b749b75caab4e4a5cc01d8299f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmUnmapLockedPages
ExAllocatePool
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ