?f@@YAXXZ
Static task
static1
Behavioral task
behavioral1
Sample
a29bf6920e935589a00aab570de61895_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a29bf6920e935589a00aab570de61895_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
a29bf6920e935589a00aab570de61895_JaffaCakes118
-
Size
7KB
-
MD5
a29bf6920e935589a00aab570de61895
-
SHA1
018b7c6aad375ad7f19145972563c37e5835fff7
-
SHA256
2a7ac036090c3479d81c400bb38b98b8e0f70c18f2c942055b52d8917f28ff9d
-
SHA512
b52a84975aed74d38b18365ed8ff6d78dced33d2e2db7a9611c32a7f831624af7f0ef9a29d9a918ecc6de33a85bbfa72b7cde5ad97ee37d2a340376d39db3366
-
SSDEEP
48:aCf4NeKq6t2M/MLwqoKgaJLFka9PfrzsX3mBH/NlYmx:A9V/NqauL+a9PfrYHmBH/NeK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a29bf6920e935589a00aab570de61895_JaffaCakes118
Files
-
a29bf6920e935589a00aab570de61895_JaffaCakes118.dll windows:4 windows x86 arch:x86
e07e00e45407ff0dd6abc9eaa981fa7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
_initterm
malloc
_adjust_fdiv
free
Exports
Exports
Sections
.text Size: 512B - Virtual size: 366B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 217B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 94B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ