Init_openssl
Static task
static1
Behavioral task
behavioral1
Sample
21067800d9de43c952f680d1517cd862_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
21067800d9de43c952f680d1517cd862_JaffaCakes118.dll
Resource
win10v2004-20240419-en
General
-
Target
21067800d9de43c952f680d1517cd862_JaffaCakes118
-
Size
30KB
-
MD5
21067800d9de43c952f680d1517cd862
-
SHA1
8c9703eaadb3d3506a596794b1d5a7efb0da4096
-
SHA256
50d6c0027feac197052cdabec8e045a73ef1b7334050ef868906e2bc6c75c9cb
-
SHA512
3257a41678e049b62119c5ae162b12a6e8ecff96185a3dfddeb3d2b14ec0757b7f74b3f6faefa7350fa64932f6a366941909e41129fa8c35e1f67567b25ec4bf
-
SSDEEP
768:xWbv+b4F+I1G/tjH+uV3Kxnmyd0R9Dnc7D:xWT24F+IQ/ZtV36mx9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21067800d9de43c952f680d1517cd862_JaffaCakes118
Files
-
21067800d9de43c952f680d1517cd862_JaffaCakes118.dll windows:4 windows x86 arch:x86
ea2de36849c59c48b402cce17d8fef14
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt-ruby18
rb_attr
ssleay32
ord5
libeay32
ord2030
msvcrt
free
Exports
Exports
Sections
.MPRESS1 Size: 26KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE