CreatePlugin
Static task
static1
Behavioral task
behavioral1
Sample
3750fd849cca61bf826335f119d87fac_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3750fd849cca61bf826335f119d87fac_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
3750fd849cca61bf826335f119d87fac_JaffaCakes118
-
Size
23KB
-
MD5
3750fd849cca61bf826335f119d87fac
-
SHA1
8ae51b994a82b726b984d4ffb71c948966556afe
-
SHA256
c079f65e5a76e5ad63320c0430df441ae88aa5744310fb8fccfdc1a3ea5cb9f3
-
SHA512
8c0bd7ec0dc736849c1cb827a5f65fcdcae0e89144e2afea07511efe932ce31df1cf61e24f66a00ea67866bc2a21193bbf4bf45a6aeb4f32db5ceecdec456749
-
SSDEEP
384:8ZjK0PWp/Cx4lzXu+QeH/jLtMw7Ktig44GMyUjskYQN82jZ7vvxlL:8JDq24Q+QSLOw7KTvGMrjskYehjZ7D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3750fd849cca61bf826335f119d87fac_JaffaCakes118
Files
-
3750fd849cca61bf826335f119d87fac_JaffaCakes118.dll windows:4 windows x86 arch:x86
2c7a05647678a75d64b3a91cc2e953cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
filemanager
??0CFileManager@@QAE@XZ
shlwapi
PathFileExistsW
msvcp71
?_Nomemory@std@@YAXXZ
msvcr71
atoi
Exports
Exports
Sections
.MPRESS1 Size: 19KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE