CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
videos_fotos.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
videos_fotos.dll
Resource
win10v2004-20240802-en
General
-
Target
0fd5e2153106a9e2a1885ea52b24e10a_JaffaCakes118
-
Size
438KB
-
MD5
0fd5e2153106a9e2a1885ea52b24e10a
-
SHA1
878dd08766ab9adcdf1d0d19cd87433d50c39f08
-
SHA256
edf2e6478fca37f495b82434efe9d7a0a9add28caa8a17b1b687b02f567fb565
-
SHA512
bb0f1694955900158b2ea8cdbcf931d9579736b12af3696cc544de6a0a41daebebb912bc69e20b21d3b0646f87092c10187525d075fcaa226bb9ddfbf18dc344
-
SSDEEP
12288:MHGpkrcJNkt3D3vaw/Khvt1pcegXcwKpD:MmnC3vRml1pczKV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/videos_fotos.cpl
Files
-
0fd5e2153106a9e2a1885ea52b24e10a_JaffaCakes118.zip
-
videos_fotos.cpl.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 742KB - Virtual size: 741KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ