scan
Behavioral task
behavioral1
Sample
02f94638e348f2cf85884655dcb99f05_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
02f94638e348f2cf85884655dcb99f05_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
02f94638e348f2cf85884655dcb99f05_JaffaCakes118
-
Size
15KB
-
MD5
02f94638e348f2cf85884655dcb99f05
-
SHA1
b3da065021de8b0fe66cc335993a106391d38ace
-
SHA256
c4f700b894a666ef033d7d1ac13c16c6534d6760ca81bb44057172bcb1ee9455
-
SHA512
0a822bc7e5a889fbc383423eb1fa791d157a0a5e35acd3be165a508f13c42ea11655b1ab680dec3ed4faf98ac33bfa8d76c0b8ad6b549f19aed4a7cc9b3e88ab
-
SSDEEP
192:zLvc/s0HIHV6XaRtwTOgYj9TnIQDLiyU61PKD4C25McV+srkqUAiQYha/tyXfJTi:Xk41tRxgg9r9n5V+sr5UAfChTJit
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02f94638e348f2cf85884655dcb99f05_JaffaCakes118
Files
-
02f94638e348f2cf85884655dcb99f05_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE