Static task
static1
Behavioral task
behavioral1
Sample
520deed38e9672940e280e6fc3294ec6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
520deed38e9672940e280e6fc3294ec6_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
520deed38e9672940e280e6fc3294ec6_JaffaCakes118
-
Size
46KB
-
MD5
520deed38e9672940e280e6fc3294ec6
-
SHA1
5589df7d7471eed1a86a98e1b21e824b9ad435a6
-
SHA256
6b90401176c3c1b15f07493e031520bbcb8c1a8d1f0eba3424d691a55a37f306
-
SHA512
dd098ee75373c472c6a21b4de976eacc22d4c48601d7e4ba1148cc92a907bedc1b028f46c32e3ec36e687d99beb8f7d5408bb7289f5bf7a8db7645ed994ebe1f
-
SSDEEP
384:N288Z1XVjaAQSniSqVJiZvv4HAQEQg3zU/lKX/ox6r5QX3JvIvWPxKT5l:kHTX5QSi/ORopErzr8vfPwT5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 520deed38e9672940e280e6fc3294ec6_JaffaCakes118
Files
-
520deed38e9672940e280e6fc3294ec6_JaffaCakes118.dll windows:5 windows x86 arch:x86
d770e3b749b75caab4e4a5cc01d8299f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmUnmapLockedPages
ExAllocatePool
hal
KfLowerIrql
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ