scan
Behavioral task
behavioral1
Sample
f917b87dfb7d0aa58119de49d2af0047_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f917b87dfb7d0aa58119de49d2af0047_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f917b87dfb7d0aa58119de49d2af0047_JaffaCakes118
-
Size
15KB
-
MD5
f917b87dfb7d0aa58119de49d2af0047
-
SHA1
60cae3a385ee60723ed597243bc5634e82ccfd58
-
SHA256
6bd195b9f6e784221fcb990ec8901516965db6f5ffc6451aed1e4735a4b39c5c
-
SHA512
617929d753ac40863e1fc2c5e55e7f346075b372d7f25e08a14386d54fd7667795ffe0e00f389399beb8f81ae8c8a7e75dce11f1504913e83a88af5c94d5fb06
-
SSDEEP
384:ptlGaSOzx3iBE+oEUlytPm4sWZBWAJUbZDLj4Ec2j/znXh:zld3iBEzoe4/DJUZXxcoznX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f917b87dfb7d0aa58119de49d2af0047_JaffaCakes118
Files
-
f917b87dfb7d0aa58119de49d2af0047_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE