CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
a29234d42d22b3abd96ef0f5e070b578_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a29234d42d22b3abd96ef0f5e070b578_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a29234d42d22b3abd96ef0f5e070b578_JaffaCakes118
-
Size
84KB
-
MD5
a29234d42d22b3abd96ef0f5e070b578
-
SHA1
3634bb894b5174ce1ae00d3c954b09e835f3a280
-
SHA256
f4aea8f4dad773fabee376b7a7be31889367fc08576d3fbb532a61d21d783ceb
-
SHA512
2b715ecf1eb6c94fbec6df962254737af0b5c6ca8fb2846823d6c4224fecd6232e95ea16b953dd170acf8c3023cba563206bcc1382ef3039340d20a75fc6012a
-
SSDEEP
1536:r6e65/x1ICPuaA8HboFTjBG/PWG55Oyn7q2gPA1zEZODX:2f/x1hPuarU9GPWGx7qdKpD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a29234d42d22b3abd96ef0f5e070b578_JaffaCakes118
Files
-
a29234d42d22b3abd96ef0f5e070b578_JaffaCakes118.dll windows:4 windows x86 arch:x86
a6b419a4a12a7c371b089eab3633a33d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
QueueUserWorkItem
ReleaseMutex
GetThreadTimes
CreateTimerQueueTimer
BackupRead
shlwapi
PathAddExtensionW
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 395B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ