?f@@YAXXZ
Static task
static1
Behavioral task
behavioral1
Sample
b3248024b803dc1efaa944287fbeadd5_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b3248024b803dc1efaa944287fbeadd5_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
b3248024b803dc1efaa944287fbeadd5_JaffaCakes118
-
Size
7KB
-
MD5
b3248024b803dc1efaa944287fbeadd5
-
SHA1
7ff1cad2e318205f1d9f60b8098c47e3fac6a923
-
SHA256
60bfa03de4e94ac214555b43a445bc88c347e8acd4e38219b101395ddb881030
-
SHA512
f0d112d7ce15bdfb3e785fbf674df06b5e50907c81c1d2683d1064fb9df87522f017105022c8c417f403bfa043f2808ae43b283c7cb9f6484cd16084667e6faa
-
SSDEEP
96:89V/NDblSX+bdGUuV7d3fy85M5uu5BoeEcQP5uHr/d9Rf5I405O:89/XlqlVp3fxwnBoeEcQBU/dDyNO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3248024b803dc1efaa944287fbeadd5_JaffaCakes118
Files
-
b3248024b803dc1efaa944287fbeadd5_JaffaCakes118.dll windows:4 windows x86 arch:x86
e07e00e45407ff0dd6abc9eaa981fa7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
_initterm
malloc
_adjust_fdiv
free
Exports
Exports
Sections
.text Size: 512B - Virtual size: 366B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 217B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 94B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ