?Dll6Main@@YGHPAUHINSTANCE__@@KPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
fa1ec4cde3f1476b39ee4156161c2187_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fa1ec4cde3f1476b39ee4156161c2187_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fa1ec4cde3f1476b39ee4156161c2187_JaffaCakes118
-
Size
11KB
-
MD5
fa1ec4cde3f1476b39ee4156161c2187
-
SHA1
6b5b0d6a5599eac8e9d396aba627711d94e7c31c
-
SHA256
eb864f89953da165e8ddb0b5c4e0f93972edc7183f71006669bb651d780e8400
-
SHA512
1dacfb7765f74e31f6e1e0b46a1d398ceccd830527cb10d2c4073d52e29dc47a9b1255660678b823fe173c681d1267701ed75a982106e4ad7f40faeab8bfd74d
-
SSDEEP
192:mWW/WlrTO4XaGOus3pMraRSuTkrWgJr1IvzOGmRnzGUsurUkodR8t2n9dXTq:mWW/WVTYGOusMOSuTKWer1IvzOxz7wnw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa1ec4cde3f1476b39ee4156161c2187_JaffaCakes118
Files
-
fa1ec4cde3f1476b39ee4156161c2187_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
l50 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
l51 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
l52 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE