test
Behavioral task
behavioral1
Sample
e9a9f305651610e238f7013bb5d2da23_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9a9f305651610e238f7013bb5d2da23_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e9a9f305651610e238f7013bb5d2da23_JaffaCakes118
-
Size
16KB
-
MD5
e9a9f305651610e238f7013bb5d2da23
-
SHA1
b0bf8e29f9c087ea3fcce8718ba3d64e99d841d8
-
SHA256
669f021cb2c53da57cd787337be77431b9603aea02fec2c0c8a0bf4e44533e60
-
SHA512
bf252c759920ed61be9dbddf075468aaf66baefebbf4b4983b99d651b90da93c28c73654888dadc34fb32d6f40776354917ea4b69f6e6f1dfffcea06803207ec
-
SSDEEP
192:fmLV5yyNQUmOj6mlWlEscmWq5OXYDxeeVwMUHDWFZwL0EHMGmVasA41onOCx8fPB:f4jyymB+96xcRqdDxeeVfeB/I7+jO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9a9f305651610e238f7013bb5d2da23_JaffaCakes118
Files
-
e9a9f305651610e238f7013bb5d2da23_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE