?Dll2Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
3f2705e9cea1ede0a42ee9b158dffcdd_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f2705e9cea1ede0a42ee9b158dffcdd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3f2705e9cea1ede0a42ee9b158dffcdd_JaffaCakes118
-
Size
12KB
-
MD5
3f2705e9cea1ede0a42ee9b158dffcdd
-
SHA1
1d37bc318c81d8138effa5eb96ed630b44fc84e0
-
SHA256
d773279ef0af338e929ddde6d64c5e18932f2e185175df83f2620d6b8559586d
-
SHA512
d41c345fa890b6531a84cc269b8c8005c4e2b306ebc6084f705ddaf58c564dd0b867088a8b00b2673f843a0f970b1cabb422fde542a1bc0654480c94b275a7f9
-
SSDEEP
384:mmW/WKch2IGOuv3bIIuT4ObOVqSgE/9PnV1aLJj:dUEPbbOJ9PnnaLV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f2705e9cea1ede0a42ee9b158dffcdd_JaffaCakes118
Files
-
3f2705e9cea1ede0a42ee9b158dffcdd_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
��N0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��N1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��N2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE