?Dll1Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
d0d3781e4f13e3a447cbd5009fb13f9d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0d3781e4f13e3a447cbd5009fb13f9d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d0d3781e4f13e3a447cbd5009fb13f9d_JaffaCakes118
-
Size
36KB
-
MD5
d0d3781e4f13e3a447cbd5009fb13f9d
-
SHA1
d43a402f366f91566cc82f2f3cce3f81b320480b
-
SHA256
e5506fd33f15e6512f0fecad8ce17d6c3f92948266a600754b55065e4f84a8fe
-
SHA512
34835d35ef93fb8febc67b7271841a0a5e089464d3096f07d004f74aefbd8dfd7e4f4c1a50fdbb15d15cadc44c44c8265d55ec9422c677af0f6cc651f46b48b8
-
SSDEEP
768:9PLVusTzi3bJmwvTOmcn1KKbztqcVFU4jvDDOp0lh6AAapi+4Z3:Fhu4iLsUTOeKXtqcVC4jvDDOOh6QiT3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0d3781e4f13e3a447cbd5009fb13f9d_JaffaCakes118
Files
-
d0d3781e4f13e3a447cbd5009fb13f9d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
S5�0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
S5�1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
S5�2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE