?Dll2Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
078896b12bd79361874487b9be55cdf3_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
078896b12bd79361874487b9be55cdf3_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
078896b12bd79361874487b9be55cdf3_JaffaCakes118
-
Size
14KB
-
MD5
078896b12bd79361874487b9be55cdf3
-
SHA1
573b017683e906702c18e9d14baf13900a6bc9af
-
SHA256
0b3db68526d9279f9c5907a162ab0b8bd2479ad93cb381795ea9591945ab066a
-
SHA512
100ac439f9bcd645ffea45e2b0c70879a3ab7d138c63b6d9834b14d6a4334aadaf8caebc02adfbcc2ea866cbad8e9dab74c5e23b3d4546fa9a00f47b01d3e91b
-
SSDEEP
384:mjW/WQ9GOumWMLw3fAtuY+S2ukzOLy+p:rDWXTY8/mp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 078896b12bd79361874487b9be55cdf3_JaffaCakes118
Files
-
078896b12bd79361874487b9be55cdf3_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
ZCO0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ZCO1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ZCO2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE