PlayBack_Module_Init
Static task
static1
Behavioral task
behavioral1
Sample
df003f94278c7c4bcaf0dd80777e12fe_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
df003f94278c7c4bcaf0dd80777e12fe_JaffaCakes118.dll
Resource
win10v2004-20240910-en
General
-
Target
df003f94278c7c4bcaf0dd80777e12fe_JaffaCakes118
-
Size
47KB
-
MD5
df003f94278c7c4bcaf0dd80777e12fe
-
SHA1
c0ca22a0a8e8d26f5945f3e73f040661b5bf2bac
-
SHA256
58e686e5be22f61eb97470ec03da7c76404f05c57a9c77a905a21e03e06bc10b
-
SHA512
70f8a0551446430f9a838c65bfc6f47a74187e38085fe0749e15e7cd5cc34694dd1931fe46bfb1b370f6e79f703b2eaf60489a8a95cd4d54d3134a821a566dac
-
SSDEEP
768:5TRkyR29zUBpd0Tt+eush29TvMHR1RSFHJRoka2Zuf2BJTDRvLu7kCC46oFxL5vF:lzR29oXqTIep2NRpRpAfwD5rCT6+xlvF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df003f94278c7c4bcaf0dd80777e12fe_JaffaCakes118
Files
-
df003f94278c7c4bcaf0dd80777e12fe_JaffaCakes118.dll windows:4 windows x86 arch:x86
bd90122c1cf86bcf3e8384b06debaa1c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetSysColor
gdi32
SetMapMode
winspool.drv
ClosePrinter
comctl32
ord17
ole32
CreateStreamOnHGlobal
olepro32
ord252
flashplayercontrol
FPCIsFlashInstalled
Exports
Exports
Sections
.text Size: 39KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE