inittokenizer
Static task
static1
Behavioral task
behavioral1
Sample
5d36da2bf5d840c54254ac13a9ce3cea_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5d36da2bf5d840c54254ac13a9ce3cea_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
5d36da2bf5d840c54254ac13a9ce3cea_JaffaCakes118
-
Size
9KB
-
MD5
5d36da2bf5d840c54254ac13a9ce3cea
-
SHA1
048e29e0de34a19c5cd85f330093801c32f8a5ef
-
SHA256
ce9e878e32c880d48079708427f102bdb53cf3da2029f87f5a5da3c3db4c3263
-
SHA512
5bbbed2c856fc7e95676d1f0861450f3f07abab779a16a124f5e817ac14c875d8105ab3887273a2884b7e0812b17342954d47fd2cd50fce87f7c190eb5fe9bc1
-
SSDEEP
192:R3lex3i5MWB2amjJrfb9Xq+AJhKksln4o8lZEDIvhayyWk4xAM1s2A4rx62HYp:R3llM1JfXKzU82DIZagk4xD7PdzHYp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d36da2bf5d840c54254ac13a9ce3cea_JaffaCakes118
Files
-
5d36da2bf5d840c54254ac13a9ce3cea_JaffaCakes118.dll windows:6 windows x86 arch:x86
5166868d5fba28aa55cf88d89a28b839
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
python27
PyList_New
vcruntime140
memset
api-ms-win-crt-runtime-l1-1-0
_cexit
Exports
Exports
Sections
.MPRESS1 Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE