?Dll2Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
b6def4dd88e76bd48a75043e4b55154d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b6def4dd88e76bd48a75043e4b55154d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b6def4dd88e76bd48a75043e4b55154d_JaffaCakes118
-
Size
11KB
-
MD5
b6def4dd88e76bd48a75043e4b55154d
-
SHA1
af4d65150a68873fd06345c9d80e171a1da18f1b
-
SHA256
d428a59b0a5fccea28d5d432076019d674061b317395eb3c880118b3d494416b
-
SHA512
70150dc9c47cee1a8bd95d9729b018eabdcae0ef1f42c64fa30e77d2b185af34e9db0f62e85f093a02e5c719e604e56dac324f3a394324dae3928d9a56a70307
-
SSDEEP
192:m3W/WfhzNGOuZEKoNQMmDOF9QPQCTL59rKnMlouN+d1CKgnpg:m3W/WfDGOuZEJQMMOHQoS59rKCouAuv6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6def4dd88e76bd48a75043e4b55154d_JaffaCakes118
Files
-
b6def4dd88e76bd48a75043e4b55154d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
)6?L0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
)6?L1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
)6?L2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE