Static task
static1
Behavioral task
behavioral1
Sample
41a514de0e0d62d2dff1811f2ae3f699_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
41a514de0e0d62d2dff1811f2ae3f699_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
41a514de0e0d62d2dff1811f2ae3f699_JaffaCakes118
-
Size
46KB
-
MD5
41a514de0e0d62d2dff1811f2ae3f699
-
SHA1
09cc143626bdbb8de30c288deaa324a3ebb46f3d
-
SHA256
629403190b9b2eff9d22e7d590a45ed5a5ce52a2e7c99f7883bc514d4200e558
-
SHA512
211ae2468175c0590953552527220bf2030adadce93e521350a8a3071c88e0d7d90925dd5e70dada9d61d960e38462f07d26912ee1ec104892716a331e5452bd
-
SSDEEP
384:pj7W5q0g+5bnseYnjF9MkqLN9awSD6gE6xPlFWs8ncRakat:tEgcjseYjSNQwPgFplFWs8W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41a514de0e0d62d2dff1811f2ae3f699_JaffaCakes118
Files
-
41a514de0e0d62d2dff1811f2ae3f699_JaffaCakes118.dll windows:5 windows x86 arch:x86
d770e3b749b75caab4e4a5cc01d8299f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmUnmapLockedPages
ExAllocatePool
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ