init_ssl
Static task
static1
Behavioral task
behavioral1
Sample
449ec2c5d6ea82eb4a60c22c0ed5251a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
449ec2c5d6ea82eb4a60c22c0ed5251a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
449ec2c5d6ea82eb4a60c22c0ed5251a_JaffaCakes118
-
Size
13KB
-
MD5
449ec2c5d6ea82eb4a60c22c0ed5251a
-
SHA1
117a92f2d0f31cbe516fb38c97b6d9e1e6c272d4
-
SHA256
81e6e7ffde05e8d70699731a732f825ce92f96bdf2489e9848f61854c3630704
-
SHA512
7424effbe93b04bdbafa8a3d0a98774868704494db80524d85917199cf3bcb08c715aef008e2b00c812225cace62c52c1ff5a759e5e46e92947ca1ce5b89050f
-
SSDEEP
384:52MAK7eZoqyOIiJum9bJgYNIWZ6BC2MgLXYp:oMd7nOIa9lgIIWZ6TMoX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 449ec2c5d6ea82eb4a60c22c0ed5251a_JaffaCakes118
Files
-
449ec2c5d6ea82eb4a60c22c0ed5251a_JaffaCakes118.dll windows:5 windows x86 arch:x86
27370a37444e24a34d907a03bf9818f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
ws2_32
select
libeay32
ord857
ssleay32
ord127
python26
PyList_New
msvcr90
free
Exports
Exports
Sections
.MPRESS1 Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE