CreatePlugin
Static task
static1
Behavioral task
behavioral1
Sample
335601b8c608f7e7a1fd354ae0f5674b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
335601b8c608f7e7a1fd354ae0f5674b_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
335601b8c608f7e7a1fd354ae0f5674b_JaffaCakes118
-
Size
10KB
-
MD5
335601b8c608f7e7a1fd354ae0f5674b
-
SHA1
9dd1b5f0c15dcd4cf15e6d4d351fd61c1f2129f7
-
SHA256
3e4a27061f9731f0f8ad56fa6b4b656f2a821b06a408542d6782cd9dbcf1d4f0
-
SHA512
735ac296fc41c7daa3429284aeccdc8f27d8007ad33eee91159f0e5358454b4a0b3fe1203c7e13e4bb380d0969d1b8488be8effda4463d8dcd15bf92fe3a110d
-
SSDEEP
192:zt32znt10Lp5oZeSoLu+8pBKKnXCMdcRxZvrMEDAzQcwKWYp:QzULPhSr+0nXCIcRTvrMfiYp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 335601b8c608f7e7a1fd354ae0f5674b_JaffaCakes118
Files
-
335601b8c608f7e7a1fd354ae0f5674b_JaffaCakes118.dll windows:4 windows x86 arch:x86
46f8288982dcf3d1aa022b6291df9d5b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcp71
?_Nomemory@std@@YAXXZ
msvcr71
free
Exports
Exports
Sections
.MPRESS1 Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 1011B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE