initARC2
Static task
static1
Behavioral task
behavioral1
Sample
10ca2c1c205cca300fddcc6c2e39fcd3_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
10ca2c1c205cca300fddcc6c2e39fcd3_JaffaCakes118.dll
Resource
win10v2004-20240419-en
General
-
Target
10ca2c1c205cca300fddcc6c2e39fcd3_JaffaCakes118
-
Size
16KB
-
MD5
10ca2c1c205cca300fddcc6c2e39fcd3
-
SHA1
88249eab645b1721d2e27e36842b6cce484c2f16
-
SHA256
6a0ca9cbc362adbfd6a844730f02e35a960835bbb9aef1a4ea460ec6bd1e6164
-
SHA512
c13c294e78eb7b96beb0a9af23bffb54028deedbf333409f164de395389ad685cfba01c984a77d7b1bc71664370071c59cd7fd863709db0c24fdfce6b689eea7
-
SSDEEP
384:NAFIoCGZeqKWGjB6pxX4LFnLSFj60Meyx8q:NA0y5q6pWhnm1r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10ca2c1c205cca300fddcc6c2e39fcd3_JaffaCakes118
Files
-
10ca2c1c205cca300fddcc6c2e39fcd3_JaffaCakes118.dll windows:6 windows x86 arch:x86
cb716f08d31866d198a525726aea953d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
python27
PyExc_ValueError
PyExc_TypeError
PyExc_SystemError
PyExc_OverflowError
PyExc_MemoryError
PyExc_AttributeError
_Py_NoneStruct
PyType_Type
PyObject_CallObject
PyEval_RestoreThread
PyEval_SaveThread
Py_InitModule4
PyModule_AddIntConstant
PyArg_ParseTupleAndKeywords
PyArg_ParseTuple
PyArg_Parse
PyErr_Format
PyErr_Occurred
PyErr_SetString
Py_FindMethod
PyString_AsString
PyString_Size
PyString_FromStringAndSize
PyInt_FromLong
Py_FatalError
_PyObject_New
PyObject_Free
PyCallable_Check
PyObject_HasAttrString
msvcr110
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
memset
memcpy
malloc
free
memmove
kernel32
IsProcessorFeaturePresent
IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 866B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ