CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
b8636423b2ddfe021488ffe360a76abb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b8636423b2ddfe021488ffe360a76abb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b8636423b2ddfe021488ffe360a76abb_JaffaCakes118
-
Size
264KB
-
MD5
b8636423b2ddfe021488ffe360a76abb
-
SHA1
b13aebfabf222c5879cb3cfd9148360a1a53eaa4
-
SHA256
1158aff1ead4a011af0007b12437f493919211b59bbdfe61875230563ab167b0
-
SHA512
d549617552583e94de117c7bc204075f0410a45c66f0560d108dbadf7ffe4911638cd2f80464efe61ab32ed78a7215e2ea8c4c7243cb7f9ac79af9c365b2728b
-
SSDEEP
6144:A39sqFqrucfFJRL7xi6hY8oaq5oor+BlWtRW:aV29JRBiFr+B+RW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8636423b2ddfe021488ffe360a76abb_JaffaCakes118
Files
-
b8636423b2ddfe021488ffe360a76abb_JaffaCakes118.dll windows:4 windows x86 arch:x86
0bbc8145ed4fab4a2def5153c9a3b76c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
gdi32
PatBlt
winmm
timeGetTime
wininet
InternetOpenA
shell32
SHGetSpecialFolderPathA
Exports
Exports
Sections
.MPRESS1 Size: 254KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE