Static task
static1
Behavioral task
behavioral1
Sample
0ad8e4bae8f6b48ed92f0c8d455cd38e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0ad8e4bae8f6b48ed92f0c8d455cd38e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0ad8e4bae8f6b48ed92f0c8d455cd38e_JaffaCakes118
-
Size
46KB
-
MD5
0ad8e4bae8f6b48ed92f0c8d455cd38e
-
SHA1
9cb93b6e629042010e3d6498b9063b7a34455e63
-
SHA256
77a9088a165df2e29349d3e47071607d52b01cdc2e5cd8b47c01bd18cf631c21
-
SHA512
ace0cd71abc16a5dda5002bcaf78072ce37e4be4576113511c2ed9d5a33bd855910a3f669725679ca39ef5461a61fb4ab62287bf81f98b5dd6a69f5c1dae6d63
-
SSDEEP
384:Sv5l88xsLWnvI15CAGNojEqMmnY/WUAxZxm66EtuO20NrVhevwHaDa7:Q5ltzIGHEdAAPQET2shqjD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ad8e4bae8f6b48ed92f0c8d455cd38e_JaffaCakes118
Files
-
0ad8e4bae8f6b48ed92f0c8d455cd38e_JaffaCakes118.dll windows:5 windows x86 arch:x86
d770e3b749b75caab4e4a5cc01d8299f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmUnmapLockedPages
ExAllocatePool
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ