gst_plugin_desc
Static task
static1
Behavioral task
behavioral1
Sample
bf44d7289c96a0c59c14718cf3386e48_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bf44d7289c96a0c59c14718cf3386e48_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bf44d7289c96a0c59c14718cf3386e48_JaffaCakes118
-
Size
9KB
-
MD5
bf44d7289c96a0c59c14718cf3386e48
-
SHA1
6d9d432fddf95291bb9f348d74c55740c874d622
-
SHA256
ea437e4616aaf2cbae45554d2860ba8e08d7fc62b8062005040c55c7e28862c2
-
SHA512
8837df8b498d554bc5b0e9a893ec11d448dcbb12693055c9905b5049b453119e902759b95e88db01f04509cd580e41a440c788fe1991544dcef9fb698845b87b
-
SSDEEP
192:HOgQnFf8+swgs5dZvd0q0lKgre+qLl28bODjTwceC3xpWYp:HOLnFU+srsll0lllq+GejTwceCBUYp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf44d7289c96a0c59c14718cf3386e48_JaffaCakes118
Files
-
bf44d7289c96a0c59c14718cf3386e48_JaffaCakes118.dll windows:4 windows x86 arch:x86
c20b7805e9ef2d89cb9c2d20c87d2abb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
gstvideo-0.10-0
gst_video_filter_get_type
gstbase-0.10-0
gst_base_transform_get_type
gstreamer-0.10-0
gst_debug_log
libgobject-2.0-0
g_type_name
libglib-2.0-0
g_log
mozcrt19
free
Exports
Exports
Sections
.MPRESS1 Size: 7KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE