?Dll1Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
4afd794dad037eb19166feda89c767b3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4afd794dad037eb19166feda89c767b3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4afd794dad037eb19166feda89c767b3_JaffaCakes118
-
Size
36KB
-
MD5
4afd794dad037eb19166feda89c767b3
-
SHA1
04b755755061b85f7c4c9819fe68740cb4eabccd
-
SHA256
7f1086a4954d87cdcd58b7eb2ffcbca4809fe977d9d28ed05bb9afaf9e675f0e
-
SHA512
05b1f926648ec295997e274134eef3f09ef3523e0d1e7679587b4d0d5cad0970e280fba4935158ed464fef7666972a388ca7ec97b0fbd861db54012eb616b444
-
SSDEEP
768:m/pcXPKJHDF2/7ara9TtjiK3BzgR/nJCvqr9/rUtJTSYV:Spc/Kjw/7iG9iK3OxGtJVV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4afd794dad037eb19166feda89c767b3_JaffaCakes118
Files
-
4afd794dad037eb19166feda89c767b3_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
�}�D0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�}�D1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�}�D2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE