Setkeyhook
Static task
static1
Behavioral task
behavioral1
Sample
e9a9b8191ba607771f59023be4ab1307_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9a9b8191ba607771f59023be4ab1307_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e9a9b8191ba607771f59023be4ab1307_JaffaCakes118
-
Size
92KB
-
MD5
e9a9b8191ba607771f59023be4ab1307
-
SHA1
93be94c063c499018298b533a51944be49c7d361
-
SHA256
69acd2f9a4e78d30b54e6fcbc6ec10befb17e72822bfa032bf1cdc277f74c4a4
-
SHA512
13c7ee711e164976b3bcebb40b8c913e0e850264030209e6f9b6a4f56e201ac64628b41933b36828c8eaf1e6c33a0e5a55a7d1e60f2596d8af6462ddad231407
-
SSDEEP
1536:d3i1qZQeX+4uv3pxt70R+Z0Pf6oc7UA7pk8AEgRiaN:XXjEl0RMUCocIA768pg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9a9b8191ba607771f59023be4ab1307_JaffaCakes118
Files
-
e9a9b8191ba607771f59023be4ab1307_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE