?Dll6Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
d0be5b45ca5b3459f2a7e238b2ef7090_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0be5b45ca5b3459f2a7e238b2ef7090_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d0be5b45ca5b3459f2a7e238b2ef7090_JaffaCakes118
-
Size
11KB
-
MD5
d0be5b45ca5b3459f2a7e238b2ef7090
-
SHA1
e2af4be767608283a2d51db72ca65d9a0eda6937
-
SHA256
5eeda4e1ca142fddac186d9075f0a5e94ea5ef729c0dcb9e73e1734046f8a555
-
SHA512
2e1de95941aa798637a39f71503214aed1853ff90f3b52ba0c199a8b73321e92c38f89ddf91764ee849f74d1548478c8fe106a0e553b7944dac03f0be8dad6fb
-
SSDEEP
192:mlW/WlrTJ4WGOu+HecdPBrzw6ZcWKyRf6wnfuIzWfznpKVA2S0BTS:mlW/WVTzGOu++MPBrzhZx0nfDpKVAoW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0be5b45ca5b3459f2a7e238b2ef7090_JaffaCakes118
Files
-
d0be5b45ca5b3459f2a7e238b2ef7090_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
<�T0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
<�T1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
<�T2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE