scan
Behavioral task
behavioral1
Sample
fde1480525e524d1037ec6eaacebbff5_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fde1480525e524d1037ec6eaacebbff5_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fde1480525e524d1037ec6eaacebbff5_JaffaCakes118
-
Size
18KB
-
MD5
fde1480525e524d1037ec6eaacebbff5
-
SHA1
8f88d3dfb51687d16ea6a22eb9dcb9e34c330ff7
-
SHA256
c64767d2f6b020d27369573585f6d42de3b5dbd6798cdad3116c7f6e875c4441
-
SHA512
940a0c4ca035cd3c6712954bb19d7fb5d89a0ec8b052f71c5531a116d664dd304bead4ab77cc377af2edc099b9549f376fe9cdd4068da338ee4dd9cfe16726fe
-
SSDEEP
384:DDU+ESh+Rs3pNaweGxiEV5N50bMAKfVgGn8q5apj9U1mtJPLW:Euh+RW44F5N5jAKfVgG8B9U1gW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fde1480525e524d1037ec6eaacebbff5_JaffaCakes118
Files
-
fde1480525e524d1037ec6eaacebbff5_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE