_DllMain@12
Static task
static1
Behavioral task
behavioral1
Sample
b1b812f454b69bdb5f6cab2ebd0de742_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b1b812f454b69bdb5f6cab2ebd0de742_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b1b812f454b69bdb5f6cab2ebd0de742_JaffaCakes118
-
Size
10KB
-
MD5
b1b812f454b69bdb5f6cab2ebd0de742
-
SHA1
059e26d09f47d8400cd390bb1786d1903e93f80f
-
SHA256
415d461f91cceaaeec991e4491a9ad42f0011a92dd6f60cfaabf25ffc23be0b9
-
SHA512
145ea55ef7e391bcdf972a95872fcdd74f3b22c9d7a0b1c2ab735fefa0228870d8d112c939f9c5806476893368f3b431b15760447f9375b60b2541b3cbb6f36a
-
SSDEEP
192:mgW/WzG+/PGOukl06/4OvUU4jtdp8D8aAcPt2je5PpU3HRrCS:mgW/WyiGOu8/zgjt8DhAY2CRpU3xrCS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1b812f454b69bdb5f6cab2ebd0de742_JaffaCakes118
Files
-
b1b812f454b69bdb5f6cab2ebd0de742_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
pg;0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pg;1 Size: 10KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE