?Dll6Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
b916e64628de7fa1862ba9f0b7e91a92_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b916e64628de7fa1862ba9f0b7e91a92_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b916e64628de7fa1862ba9f0b7e91a92_JaffaCakes118
-
Size
13KB
-
MD5
b916e64628de7fa1862ba9f0b7e91a92
-
SHA1
d4e1f01260ba6bf21c1cabf5d669273dbfccbebb
-
SHA256
b4a1f30ae3e0e98b467779c65186513852d4ae009d564941fcde0c3953c03482
-
SHA512
891e1e34ca18bd1b3ef24ceaddf779296a847cec35761df83a9148e46f2e7f11edd9292ce2f8c3b16e45a606782fc82148a1c278c840556e746826e6b40900bf
-
SSDEEP
384:mLW/W7U8GOuaCOAWpeCnpbDdv1f2J6JECzIyb5:EvWWp5NB1f2J/V85
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b916e64628de7fa1862ba9f0b7e91a92_JaffaCakes118
Files
-
b916e64628de7fa1862ba9f0b7e91a92_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
K*{0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
K*{1 Size: 13KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE