Static task
static1
Behavioral task
behavioral1
Sample
cfcfe0653da0d7c66a119b4c19996e71_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfcfe0653da0d7c66a119b4c19996e71_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
cfcfe0653da0d7c66a119b4c19996e71_JaffaCakes118
-
Size
46KB
-
MD5
cfcfe0653da0d7c66a119b4c19996e71
-
SHA1
1e51b48584dfb47c933de83f9a29687d7b20c8c8
-
SHA256
49c78545c76485faa1d460a011c25a375b6f6e243f8fbd92e70131f488a7e9c6
-
SHA512
bd92753aefed9a8e9a43af9ed9611c1e4c43d7167ea57c29f7ce9d6792b8930595284d766d0b4560a751e365be4db8a1e3407c788f805e0509c77df24ed79f58
-
SSDEEP
384:97ikLoKhgqzPkk38NdMEMg5BYBmY/zus12WZ1UShG59TIdJdR:9GkBgQkkYMEsB/T4cU5TUJdR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfcfe0653da0d7c66a119b4c19996e71_JaffaCakes118
Files
-
cfcfe0653da0d7c66a119b4c19996e71_JaffaCakes118.dll windows:5 windows x86 arch:x86
6e20299413b2bf0e99270ef3fc39aaf0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
IoAllocateMdl
ExAllocatePool
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ