PyInit__socket
Static task
static1
Behavioral task
behavioral1
Sample
9e4f59ec9bcf49db63580dc2a863d7cd_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9e4f59ec9bcf49db63580dc2a863d7cd_JaffaCakes118.dll
Resource
win10v2004-20240426-en
General
-
Target
9e4f59ec9bcf49db63580dc2a863d7cd_JaffaCakes118
-
Size
22KB
-
MD5
9e4f59ec9bcf49db63580dc2a863d7cd
-
SHA1
afea020644c88183193869a76f62326d24b7ee8a
-
SHA256
50c49476660db77c97d6658655b4c780ed896e6274a172b878095406b08ded61
-
SHA512
1b2d3551bc0971c9791a7419fd458d9522aa327ec2d3718112f4905803168c70a107e45590ced8eeae7777d6463fee853017270dd8dbf2037aacffc045fc5838
-
SSDEEP
384:VJ9QMOE0FViFWa7ACq3yu/cVDUW/4ksGXN/rjK4kbVO0im80SCo9uwT7vvxlL:HCTE0qBACKch/4kfw4Dm803o9HT7D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e4f59ec9bcf49db63580dc2a863d7cd_JaffaCakes118
Files
-
9e4f59ec9bcf49db63580dc2a863d7cd_JaffaCakes118.dll windows:5 windows x86 arch:x86
92144a51ee35fd3d130ef28622f3bb88
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
ws2_32
socket
python33
Py_AtExit
msvcr100
free
Exports
Exports
Sections
.MPRESS1 Size: 18KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE