?Dll1Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
b7c693ff99060b8c64e52cf583c34f06_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b7c693ff99060b8c64e52cf583c34f06_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b7c693ff99060b8c64e52cf583c34f06_JaffaCakes118
-
Size
128KB
-
MD5
b7c693ff99060b8c64e52cf583c34f06
-
SHA1
f66e3bdfca1a24bbd67ca9c80804ec7861da6bbb
-
SHA256
96771c9875adceb38e27c33e45ee860187e8ce578e4c375e44139e54903d173e
-
SHA512
9a4c3214941c97fd4eae87cce837dd0693ad0a3ec556e4d289c9eac9e0d083fb0bef71c61988421e6402199200bd440ba8ec09dfffd74ea35da6f1c512389320
-
SSDEEP
1536:AIXF6ETMynvxgJthe3PDsbuinsh1OTAPHDtlYBk1G3EUu9GBoDt2:AGp2e3yuiwcTAPHDtlG3FGDt2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7c693ff99060b8c64e52cf583c34f06_JaffaCakes118
Files
-
b7c693ff99060b8c64e52cf583c34f06_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
�U�W0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�U�W1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�U�W2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE