CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
22dd557d3a2acb92156a29aec74481b5_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22dd557d3a2acb92156a29aec74481b5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
22dd557d3a2acb92156a29aec74481b5_JaffaCakes118
-
Size
207KB
-
MD5
22dd557d3a2acb92156a29aec74481b5
-
SHA1
5a5f63471eec9e7a59f2623b4482b9d38f1b828e
-
SHA256
ea075b06ae8dda91f8e4758997826a1e3b77c51c5d8cab002890c4648fbc65fe
-
SHA512
452ef1f88041a9374ed7475a049420fd282ea7ee2c5d8c630a954d8bff7106837fe1e790bbbc04d45eaec5f9ce6b2e83bc4695d17f8dcd565e40d97dce5bcbc9
-
SSDEEP
6144:CycnJVUol6YvhwrE2CzrjnlpVG7gdA0enctzF:3cnJVUoqE2C5G8d+nOzF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22dd557d3a2acb92156a29aec74481b5_JaffaCakes118
Files
-
22dd557d3a2acb92156a29aec74481b5_JaffaCakes118.dll .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 204KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE