SetCNkeyhook
Static task
static1
Behavioral task
behavioral1
Sample
2cd931304e378c46891f618225cb0119_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2cd931304e378c46891f618225cb0119_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2cd931304e378c46891f618225cb0119_JaffaCakes118
-
Size
50KB
-
MD5
2cd931304e378c46891f618225cb0119
-
SHA1
4a28a9122efc91cf9b70218f3bd4d66a23bf3b22
-
SHA256
b6133488278e350d542da374de11cb040f16de8405ed13ea5d6446b47900ac21
-
SHA512
8293e2b1d985a9de7468fe7dc1e694983f1d3e418c991d9fb1badb6fdda0b0f0a2d20347429000b7ca9a710c516976400aa2bf24c531e74b258d848aa88dfcbf
-
SSDEEP
1536:d3itqfQb1qWWNKWLRnLKp6z0R7JrJGiS:1igWgL1Op6EJPS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cd931304e378c46891f618225cb0119_JaffaCakes118
Files
-
2cd931304e378c46891f618225cb0119_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.MaskPE Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ