initBlowfish
Static task
static1
Behavioral task
behavioral1
Sample
de156ef122c21f9b6cfb680b710443c7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de156ef122c21f9b6cfb680b710443c7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
de156ef122c21f9b6cfb680b710443c7_JaffaCakes118
-
Size
20KB
-
MD5
de156ef122c21f9b6cfb680b710443c7
-
SHA1
b88b1f8df049aa4000168649841fdba59ff0fbe9
-
SHA256
56af0e735dd58a446ea8cd76d826a0554e5a42e48b47d5b068b01df972aaa6b2
-
SHA512
91c3ba50fbf6a1b1a024af3396fb0e88cdb93dfa99607270de66296993bb3a4a0297f0c5b8cc7f342a56462c613c63695b9538807273fcb236663f3a834e1339
-
SSDEEP
384:Nwf6N4YWjYx3goTo07A86z/S2JpJgLa0MpcFj60M7SJQ:NT4tYxNc262GgLa1C12x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de156ef122c21f9b6cfb680b710443c7_JaffaCakes118
Files
-
de156ef122c21f9b6cfb680b710443c7_JaffaCakes118.dll windows:6 windows x86 arch:x86
cb716f08d31866d198a525726aea953d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
python27
PyExc_ValueError
PyExc_TypeError
PyExc_SystemError
PyExc_OverflowError
PyExc_MemoryError
PyExc_AttributeError
_Py_NoneStruct
PyType_Type
PyObject_CallObject
PyEval_RestoreThread
PyEval_SaveThread
Py_InitModule4
PyModule_AddIntConstant
PyArg_ParseTupleAndKeywords
PyArg_ParseTuple
PyArg_Parse
PyErr_Format
PyErr_Occurred
PyErr_SetString
Py_FindMethod
PyString_AsString
PyString_Size
PyString_FromStringAndSize
PyInt_FromLong
Py_FatalError
_PyObject_New
PyObject_Free
PyCallable_Check
PyObject_HasAttrString
msvcr110
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
memset
memcpy
malloc
free
memmove
kernel32
IsProcessorFeaturePresent
IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 882B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ