SetCNkeyhook
Static task
static1
Behavioral task
behavioral1
Sample
0ff4204c29939313534521c792d0fdbd_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ff4204c29939313534521c792d0fdbd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0ff4204c29939313534521c792d0fdbd_JaffaCakes118
-
Size
32KB
-
MD5
0ff4204c29939313534521c792d0fdbd
-
SHA1
3d60b8b9849b86789db3675f10d9fda13fbe3640
-
SHA256
e249d4176568490847ee6a123465219226810166e74a1be3087a9012b7c8f158
-
SHA512
64c60a4780649cc2b91ad280de7b132e6f0683a2a672364a99b2e91d615895f38e91c4bf64209ea88bfae35efba4eb0de00b3aebab893821eadc4ff1a6f946a1
-
SSDEEP
768:EKzynPqzTKSGwc+iUCFThgStHqRzIaGrqKsVHNjrL0vCT:EIyyz2SGwPK3KRMaqqK2H5P0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ff4204c29939313534521c792d0fdbd_JaffaCakes118
Files
-
0ff4204c29939313534521c792d0fdbd_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
�t�0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�t�1 Size: 31KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE