Start
Static task
static1
Behavioral task
behavioral1
Sample
016e9163a0986a29621258b61f509761_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
016e9163a0986a29621258b61f509761_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
016e9163a0986a29621258b61f509761_JaffaCakes118
-
Size
12KB
-
MD5
016e9163a0986a29621258b61f509761
-
SHA1
d8d73fd33afec4546db165626fcc55f5bb10ed4b
-
SHA256
47cd09afd6864ae2e4963c87bdf9ee948811140c58afccf8988f1022f63b9101
-
SHA512
4ee0aeb8884eaa4650feedfbc669f0de81a0fae78008cfa5a9344d5a948d098cdffad2f2a2853619ebb4101348c59139d1a153bcbdc96d202b253d6d2598b67b
-
SSDEEP
384:1J3AJxAxQ/KwCiA4DgvPvCPVEVgbGqo5AorspFXN:1tA4x6CivDyCPVwKd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 016e9163a0986a29621258b61f509761_JaffaCakes118
Files
-
016e9163a0986a29621258b61f509761_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE