?rlmon@@YAXQBD@Z
Static task
static1
Behavioral task
behavioral1
Sample
0356e89ae8fe21914bac15ae7df0eeda_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0356e89ae8fe21914bac15ae7df0eeda_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0356e89ae8fe21914bac15ae7df0eeda_JaffaCakes118
-
Size
44KB
-
MD5
0356e89ae8fe21914bac15ae7df0eeda
-
SHA1
ff96a0619ff5fe288168ebf833bed5bc70841353
-
SHA256
e31be318eae04f2a4357b3dfbbbacbe879148a2b2ab6a25d6f072a55d0d4c77b
-
SHA512
f4e6fc717bac8b6a33ff34478c212eac5f658eddf6491ddbdd7fd86604c2c39510e2a57bfc3fdc7c3e83026b74367d95a8539d121277e892bbcd7a05fb15ae40
-
SSDEEP
768:DFycySoyeHQdHDsu440LRqyj3otJ3g10iA:DFycyfHQdHQPLRqK3oQ10H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0356e89ae8fe21914bac15ae7df0eeda_JaffaCakes118
Files
-
0356e89ae8fe21914bac15ae7df0eeda_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ