InitializePrintMonitor2
Static task
static1
Behavioral task
behavioral1
Sample
5f13905eff46193d28f10e177c463be4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5f13905eff46193d28f10e177c463be4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5f13905eff46193d28f10e177c463be4_JaffaCakes118
-
Size
32KB
-
MD5
5f13905eff46193d28f10e177c463be4
-
SHA1
770f72e3ed5b30379bf03d843eda782b873c0e0e
-
SHA256
108ab23db2f32ed913909abb3f7e48e1d4b50727d9ac96e4696f02557d7540e3
-
SHA512
334a26e3e1a48297cf0cd0e2cc044d01452b4f7adb468c25126c856adbfb45f4e5233b9c5b213e5dae7be39ccee8bb04b118ee2502b48fad26b69a52833a24cf
-
SSDEEP
768:ey+cvvtWgoZo9c5yVSX+SyLvi5ykDDa9WrSnoJZ4:eyJzolyVNV7iMkHQWFc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f13905eff46193d28f10e177c463be4_JaffaCakes118
Files
-
5f13905eff46193d28f10e177c463be4_JaffaCakes118.dll windows:4 windows x86 arch:x86
27d1aa7afc3c8cbb3462d844c8701792
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
winspool.drv
SetJobA
Exports
Exports
Sections
.noname Size: - Virtual size: 68KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.noname Size: 31KB - Virtual size: 31KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE