gst_plugin_desc
Static task
static1
Behavioral task
behavioral1
Sample
06a94287e81c4e412d0cd2c6dd93d3c5_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
06a94287e81c4e412d0cd2c6dd93d3c5_JaffaCakes118.dll
Resource
win10v2004-20240419-en
General
-
Target
06a94287e81c4e412d0cd2c6dd93d3c5_JaffaCakes118
-
Size
13KB
-
MD5
06a94287e81c4e412d0cd2c6dd93d3c5
-
SHA1
242711269b071c7d7f5c72115410b4baa757dd8e
-
SHA256
feb76e48318a448c6f40fc457a35a6337df5cfccfc25b0d9559d749073c663ed
-
SHA512
80bfacd7275c43b17e00cd669c61af4789b53d970a00294983abef270115b618dfbd72d4b8738de81a89f3e1404ed2f92cac16c48ab8f5ae722f54449cb88a7d
-
SSDEEP
384:6ZNHx3KaNlB7clDngmWLp/JsAoyzZm5/eZHbUYp:63s+nQtgpsAvY5/SU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06a94287e81c4e412d0cd2c6dd93d3c5_JaffaCakes118
Files
-
06a94287e81c4e412d0cd2c6dd93d3c5_JaffaCakes118.dll windows:4 windows x86 arch:x86
e75df89b52af0864bbb9aeeb421febf0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
gstbase-0.10-0
gst_adapter_new
gstreamer-0.10-0
gst_pad_push
libgobject-2.0-0
g_type_name
libglib-2.0-0
g_log
mozcrt19
free
Exports
Exports
Sections
.MPRESS1 Size: 11KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE