SetCNkeyhook
Static task
static1
Behavioral task
behavioral1
Sample
2401ff424685cf545c5f8ed4543b06b7_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2401ff424685cf545c5f8ed4543b06b7_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
2401ff424685cf545c5f8ed4543b06b7_JaffaCakes118
-
Size
51KB
-
MD5
2401ff424685cf545c5f8ed4543b06b7
-
SHA1
f7552bb5e28dd8644e241a95da365f43a9cc8d0e
-
SHA256
b93fa2ca325bda1f8cc21d66eb922e96513b7fd06d44a35aecf8fb3dcb80884d
-
SHA512
65f3142afe4b118880abb738d474a5d1e9c5cf878044d1527a197bb26b014f3b6b33435217a8e7154cbbf2ff58378384b68b06733e1c6ce608f7c229742b0d69
-
SSDEEP
768:m32XfnSPibsFlmLpvT8X6a/6nsYU5xMdA+1bFyBOr:G2X/YibGmLxT8X67nsN5qASbo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2401ff424685cf545c5f8ed4543b06b7_JaffaCakes118
Files
-
2401ff424685cf545c5f8ed4543b06b7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE