Static task
static1
Behavioral task
behavioral1
Sample
1694a2321715092fc757b41ad4e7578a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1694a2321715092fc757b41ad4e7578a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
1694a2321715092fc757b41ad4e7578a_JaffaCakes118
-
Size
43KB
-
MD5
1694a2321715092fc757b41ad4e7578a
-
SHA1
4b7e7f128d80dd52f0bb5d7b8818727cf9105f21
-
SHA256
eabb4068a08926695bfff6f9028d38f4d3098d5cd4b04648c935854adfd5f1ba
-
SHA512
98ee304a1e11da8d0199d87770e181f3dd47f2960e31f763d6395dc7d1e0f83b5e72c208298d21443c64eebbc3ffd969988ba937e4912b2352d43ae69fb024c0
-
SSDEEP
768:UW+Ga03nBAhuGwYZGSaxW+Ga03nBAhuGwYZGSaxW+Ga03nBAhuGwYZGSa:UW/jAOYZGLxW/jAOYZGLxW/jAOYZGL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1694a2321715092fc757b41ad4e7578a_JaffaCakes118
Files
-
1694a2321715092fc757b41ad4e7578a_JaffaCakes118.dll windows:4 windows x86 arch:x86
d6f1256636225b5958c22fe4aed57b0e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
ObfDereferenceObject
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ