gst_plugin_desc
Static task
static1
Behavioral task
behavioral1
Sample
d18db4a27255752d018efdf2d1384e5e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d18db4a27255752d018efdf2d1384e5e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d18db4a27255752d018efdf2d1384e5e_JaffaCakes118
-
Size
9KB
-
MD5
d18db4a27255752d018efdf2d1384e5e
-
SHA1
6d8acd52ff757f0b9ba18eb33135cf0bb790bf63
-
SHA256
b9a66bd18cff1c1ee59910a6805f4b7430521a8e3445b53e5d625548ad7dcd9a
-
SHA512
0da2aa454a1affdc2dccb1f77859db81669563d0c0fc55bccc76cb039d66b1670aedda180b209b7f1aa9df321238fcac857b0447025f177feb715d4c92342542
-
SSDEEP
192:C0IR/CTHxdJxg7DFNQ3S33XuLTf1ercWNO/h9bFXWYpl:C0k84py83XQTNercWE/vUYpl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d18db4a27255752d018efdf2d1384e5e_JaffaCakes118
Files
-
d18db4a27255752d018efdf2d1384e5e_JaffaCakes118.dll windows:4 windows x86 arch:x86
1a5fe1afa2cb6a4de07d73cb2127b799
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
gstriff-0.10-0
gst_riff_create_audio_caps
gstreamer-0.10-0
gst_pad_push
libgobject-2.0-0
g_type_check_class_cast
libglib-2.0-0
g_free
msacm32
acmDriverAddW
mozcrt19
free
Exports
Exports
Sections
.MPRESS1 Size: 7KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE