CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
0eeb430481f2cd1daaf9de4760b5cc6f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0eeb430481f2cd1daaf9de4760b5cc6f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0eeb430481f2cd1daaf9de4760b5cc6f_JaffaCakes118
-
Size
663KB
-
MD5
0eeb430481f2cd1daaf9de4760b5cc6f
-
SHA1
cc1146dcfc7a5fd5911a9e2cd324b69b6b1bf65f
-
SHA256
1846fa39857183fa987315d45f2ee2603cae7afdc14363ebfec6d2d715df83f3
-
SHA512
e6815167b0e54b837b649762a57939ed1fefe947fd722b637815b3b7cb77de4e82af7eddb6bbce823a3a085ea0c5eab8e60976ce9ec4b7f927c71e96953ced75
-
SSDEEP
12288:b8YtKfUX63HGsQUJi7AWdnyBd7QS91kOR3kkkZkkIkwkpL88888F888nr8H8J28T:QSKfF3HatMCOd0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eeb430481f2cd1daaf9de4760b5cc6f_JaffaCakes118
Files
-
0eeb430481f2cd1daaf9de4760b5cc6f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 311KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ