Start
Static task
static1
Behavioral task
behavioral1
Sample
e86172acc247f6d8f7f044d059ac52d4_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e86172acc247f6d8f7f044d059ac52d4_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e86172acc247f6d8f7f044d059ac52d4_JaffaCakes118
-
Size
212KB
-
MD5
e86172acc247f6d8f7f044d059ac52d4
-
SHA1
531b5733b27b01e93d462c28b36a4c6e53719ad7
-
SHA256
f1e57a4efc65a33f84465a7eb9ed553d765a9c521943eb4c329ee54960a151ab
-
SHA512
1c989078706400936e85b230bc1848da56afed6103b19e767c8e3a6421e26fab52b08a688368f88122362cc5f93a68cb8ffe9eaf44148a96dd682af976e0c62a
-
SSDEEP
192:ezIfPSL5FM/rQi0IifKYMOHzbAx+D4vKamQSecO1WoGh++8VNie+AZN+oKkgUw9W:qIfGMDQs8J9MWlYGh3gNikNZ9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e86172acc247f6d8f7f044d059ac52d4_JaffaCakes118
Files
-
e86172acc247f6d8f7f044d059ac52d4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE