PyInit__curses_panel
Static task
static1
Behavioral task
behavioral1
Sample
734b43c535d8268522ee33d745afc10f_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
734b43c535d8268522ee33d745afc10f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
734b43c535d8268522ee33d745afc10f_JaffaCakes118
-
Size
7KB
-
MD5
734b43c535d8268522ee33d745afc10f
-
SHA1
08725556762ff3685bb6fe910096ea6ab014f6df
-
SHA256
28b546f92178de092ca7158b39f2244cf4e600f1ef2ac91ef18820c6f401d2d7
-
SHA512
fe586db80c3bb0009167ca3622c9f19e35a5f38b51bfbe0f4a572237d9b02f23b06ba610335b98779b1cfb0f4ae549e09606133bdd502c7418ee60e87afd7680
-
SSDEEP
192:OFoP74AwsqfTPeqtlL4yeVuFsvSpA2JYp:4n/tlLlecFsvSpAWYp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 734b43c535d8268522ee33d745afc10f_JaffaCakes118
Files
-
734b43c535d8268522ee33d745afc10f_JaffaCakes118.dll windows:4 windows x86 arch:x86
c466fa48767602746ee09662daa9b5e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
libpython3.7m
PyMem_Free
cygwin1
free
cygpanelw-10
del_panel
Exports
Exports
Sections
.MPRESS1 Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE