Start
Static task
static1
Behavioral task
behavioral1
Sample
86b9970dd3316a83d51d043b7a85c835_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
86b9970dd3316a83d51d043b7a85c835_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
86b9970dd3316a83d51d043b7a85c835_JaffaCakes118
-
Size
11KB
-
MD5
86b9970dd3316a83d51d043b7a85c835
-
SHA1
a6a9c6499e1e71660d2d92ecbfb456b2a4ceea33
-
SHA256
f3c738d228a60d2ccafc24c924b002af6275062e012a1aedb34676c349517e9f
-
SHA512
4faf5bd547aecc415dcf0cac0ae50ae210e7b7582229690b95e077bc3dd218d20fcaeaa1c4cec840988da6a5f6fd24e6511334cd48bf3e6cdae1bd75df46e218
-
SSDEEP
192:HCyy4hgHehmkm4ne7hGWYDfD3I9h6ap1jN3ixjvVittQGIY4f2PsmT7+mst2kgU7:HCFHehmkLn0EWYDCAaTjKjAttQtlaxfs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86b9970dd3316a83d51d043b7a85c835_JaffaCakes118
Files
-
86b9970dd3316a83d51d043b7a85c835_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE