?Dll2Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
bd3481fb0df5ef8b04058b8a533708b8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd3481fb0df5ef8b04058b8a533708b8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bd3481fb0df5ef8b04058b8a533708b8_JaffaCakes118
-
Size
44KB
-
MD5
bd3481fb0df5ef8b04058b8a533708b8
-
SHA1
b699cb1614d406945fcb6a915e27c579baf69a76
-
SHA256
9529563c69a24f23226e8efdab3ef6491e43dc6fdc4125b0a114daece653a786
-
SHA512
768248c114790ed49d75a21c8a6d11962a0e0ee7015a567a1d020c455a9b0517250cff34c66c8fa03e9940262e04c08fbd03ae806cfa890b8a555e2a8e16a4dd
-
SSDEEP
384:mbW/WNB1sFP0pCHeToKofGOusNXifav+5Soz1MLlMUXhHL5qavJa72n1qYzn+ojn:dcs+qZog+dylMwUS8Yzn+UM7WREjw5t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd3481fb0df5ef8b04058b8a533708b8_JaffaCakes118
Files
-
bd3481fb0df5ef8b04058b8a533708b8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
~�*0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
~�*1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
~�*2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE