Static task
static1
Behavioral task
behavioral1
Sample
12ad6ec9e8b257b741a1d3a1b366b003_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12ad6ec9e8b257b741a1d3a1b366b003_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
12ad6ec9e8b257b741a1d3a1b366b003_JaffaCakes118
-
Size
46KB
-
MD5
12ad6ec9e8b257b741a1d3a1b366b003
-
SHA1
69b55a88a7157276d5824fa11739c4e14cb456d8
-
SHA256
6611e961a1aa8c55fae357dd088103ce4def85c919f6b4c81a33ea578c29423c
-
SHA512
2713bd8dcf8e69b645b416bcd9459006cb9254555b91fba736756f2889f66aede4f371bfb7897e58283c67cd475f194ee6d85974c95b1eebbca9a0e960a9da9e
-
SSDEEP
384:Dqu1yv2noh9PPczxiGW7ux3ltl/DDWFwAjjJPnHJDLWDZa4/UB3tgoF6d4a7NS:+y3S9PUNWax7tK6svpXuamO3fF6db7g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12ad6ec9e8b257b741a1d3a1b366b003_JaffaCakes118
Files
-
12ad6ec9e8b257b741a1d3a1b366b003_JaffaCakes118.dll windows:5 windows x86 arch:x86
b4e707e9acecd405bdd67065419b8250
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
ExAllocatePool
MmUnmapLockedPages
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ