?Dll1Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
656156e7c28a361e5d6897a2ec14e11d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
656156e7c28a361e5d6897a2ec14e11d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
656156e7c28a361e5d6897a2ec14e11d_JaffaCakes118
-
Size
40KB
-
MD5
656156e7c28a361e5d6897a2ec14e11d
-
SHA1
e09ad75c0772fa7819975fd5184f79a6deae98bf
-
SHA256
542fd38366d3bdaacc081b4839e67adfa526d60b5eb5d6a22e6e5ac6afa68cd9
-
SHA512
f68aba0194a3859d33f2487bdce09878dc2af4db6a5c5679b4b71fbb5231c5af95cf71c043bd73b63e32e958fd3cd26555e19ad89fc48d1ed8a449e69b1bc11f
-
SSDEEP
768:Vl0Ur1u9/JQ7dZpRRe89Jb8eZD2nY+9ZgQ8iwEdwREEmcxBaNJclxTH:Vl0U0sRdwgGYQD8iBrmEYxL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 656156e7c28a361e5d6897a2ec14e11d_JaffaCakes118
Files
-
656156e7c28a361e5d6897a2ec14e11d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
�9�+0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�9�+1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�9�+2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE