?Dll2Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
a4fa73550a0798f93a63466666663db8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a4fa73550a0798f93a63466666663db8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a4fa73550a0798f93a63466666663db8_JaffaCakes118
-
Size
14KB
-
MD5
a4fa73550a0798f93a63466666663db8
-
SHA1
c8790d5449b57ac998a0c9ccbd197e9f5d2364f1
-
SHA256
c346727265c3de63ef231409c1c9a1d65a86a02a983e0a84be4309508381e02a
-
SHA512
f9c24e05133fe5931bacc64c2d07a91b65b11613196d766687ddb6ccc570dd32cfb3b316bee25932f486e0bd8cc2f8ef993726654535685a5d24864d858b8ed6
-
SSDEEP
384:mdW/Wx0ZGOubKFkm86sVQQxQYPB9lXmWRVvSE868:v8Kkm8p9ZDZlSE868
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4fa73550a0798f93a63466666663db8_JaffaCakes118
Files
-
a4fa73550a0798f93a63466666663db8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
�0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE