?Dll1Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
8d260611b10f5a48d27c97b8cbb2a543_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8d260611b10f5a48d27c97b8cbb2a543_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8d260611b10f5a48d27c97b8cbb2a543_JaffaCakes118
-
Size
22KB
-
MD5
8d260611b10f5a48d27c97b8cbb2a543
-
SHA1
9f812e2ad1e6bf1ec7c8625231d8502fe9ee9bb8
-
SHA256
1a5dcab0344ea4c94dd76efb23804b10159f14a38892238512b4b5b1b8f87a3d
-
SHA512
807be11a0e8f29ade3490d1db4e8036499565f4c3c466e12e99a2b4700a0cdf36f1a1a48eea0c3fb3a05fcf2e454dc3df9d17eaa4284baa204dfa5734a235669
-
SSDEEP
384:mVW/WgyGOuEOiuQ3lQ+fXqXW1jg/DpGRAAtMMKMTXaSbAupxgQyUAEbvVb4OG/lJ:c7vdlQ+fqXWhgLpGRRZTq3CuQlAEbNb6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d260611b10f5a48d27c97b8cbb2a543_JaffaCakes118
Files
-
8d260611b10f5a48d27c97b8cbb2a543_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
$�0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$�1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$�2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE