CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
0810521e3205a4a3a730da791537e69a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0810521e3205a4a3a730da791537e69a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0810521e3205a4a3a730da791537e69a_JaffaCakes118
-
Size
77KB
-
MD5
0810521e3205a4a3a730da791537e69a
-
SHA1
de7970dea36f0b487931fecc0deba74e998e501a
-
SHA256
70260f4a4310345c4827c0f9f46c40c82eee31fb854799f2e1b3c3bbcd49ec6b
-
SHA512
0b33f7a6a9f33cc90676197b97280eb050aa7d549f657cad8fa347435ff57a2d7b31ecef3f70d12ce9de7bd259bcafca82162b90c965f9a0ef8f7e40be8a5cb8
-
SSDEEP
1536:nWMBxuj5WZHxBqJPQeyJOw7gYixtsFqMsYsmxDrHi+2OhBv03NNOjc+vHl4t:Wm4j5hfgdt2aFqMNp2EBv0b+c+t4t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0810521e3205a4a3a730da791537e69a_JaffaCakes118
Files
-
0810521e3205a4a3a730da791537e69a_JaffaCakes118.dll windows:4 windows x86 arch:x86
dd932b1a8f5caa7c6742dce50c0a7c23
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
wininet
InternetSetOptionA
Exports
Exports
Sections
.text Size: 69KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE