CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
103d0511d521d28d6b21bcf4522cecf1_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
103d0511d521d28d6b21bcf4522cecf1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
103d0511d521d28d6b21bcf4522cecf1_JaffaCakes118
-
Size
88KB
-
MD5
103d0511d521d28d6b21bcf4522cecf1
-
SHA1
894b9fd4817ecacb5ba2820e0048b53f55a84901
-
SHA256
9340afcaa8661d208b4ddd5188e4ceeb6644353182e13d80395cf324c2f90427
-
SHA512
c0da78189c8c6ee866bf910b2fcab46eee9c6160e7fa73b7ba1f96cfdf035702e45c6b232420b9e3059c0a731c58b5aad61d97645c04edd1b25a814a5f30ff20
-
SSDEEP
1536:JzKjH2I7ZyspH3lSAPdSN8GhCj+hCfAxK7SzM/ciQefpGG9GVSxsJJnwZQf8PY7t:FA2WyU13PQNKAISkTfNGVBt0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 103d0511d521d28d6b21bcf4522cecf1_JaffaCakes118
Files
-
103d0511d521d28d6b21bcf4522cecf1_JaffaCakes118.dll windows:4 windows x86 arch:x86
b66ce8d837236f27ca01f8fc84c4b7e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
shell32
ShellExecuteA
wininet
InternetSetOptionA
Exports
Exports
Sections
.text Size: 76KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE