Init_windows_1251
Static task
static1
Behavioral task
behavioral1
Sample
42184403e921614e0e210d8cd2d9e20f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42184403e921614e0e210d8cd2d9e20f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
42184403e921614e0e210d8cd2d9e20f_JaffaCakes118
-
Size
8KB
-
MD5
42184403e921614e0e210d8cd2d9e20f
-
SHA1
591e34626eb663ce35fb206a93231acd2940fdd7
-
SHA256
c31faa97d477ade828f32220b76131c2a91cd0a99add8506d39c0dccc91b538d
-
SHA512
ad8fb650a2420d0d0492e813b7a53e587df1b4cd7535122ac25ee9220b424de1455564e4faf7c81f6f70669c55ce983aec2233e562d4ffc97348d3e35100e924
-
SSDEEP
96:ITByInNTCdUDbGL4XfrUSJ+s2/qpgf3X3X3diHtn2GPH8FixzOTCR:NInNTCdUDbGIfrJ+sGCgF8nZPDzOTC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42184403e921614e0e210d8cd2d9e20f_JaffaCakes118
Files
-
42184403e921614e0e210d8cd2d9e20f_JaffaCakes118.dll windows:4 windows x86 arch:x86
8db61b965045f625b2dc5cbc6304e6cf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
msvcrt-ruby191
onigenc_always_true_is_allowed_reverse_match
onigenc_apply_all_case_fold_with_map
onigenc_get_case_fold_codes_by_str_with_map
onigenc_is_mbc_newline_0x0a
onigenc_minimum_property_name_to_ctype
onigenc_not_support_get_ctype_code_range
onigenc_single_byte_code_to_mbc
onigenc_single_byte_code_to_mbclen
onigenc_single_byte_left_adjust_char_head
onigenc_single_byte_mbc_enc_len
onigenc_single_byte_mbc_to_code
rb_enc_register
kernel32
AddAtomA
FindAtomA
GetAtomNameA
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
_assert
_errno
_iob
abort
fflush
free
fwrite
malloc
memcpy
memset
vfprintf
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 212B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ