scan
Behavioral task
behavioral1
Sample
04dfe326f23157a71e6d4c4e84c0991e_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04dfe326f23157a71e6d4c4e84c0991e_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
04dfe326f23157a71e6d4c4e84c0991e_JaffaCakes118
-
Size
15KB
-
MD5
04dfe326f23157a71e6d4c4e84c0991e
-
SHA1
a8898dc913fe895233ebcd2b11f43d11b263b658
-
SHA256
287f0009b818e02799beaa176064011c52480ce16c5ad00ce88634abdf50f12c
-
SHA512
0460bcb07296ca8ada171ce922dc80ce77aed4c34c72d498f127954f6155390e4314aafb8622d0aaf9b9e352160dd44fa857ef65dc00e822d64ec14db0d36c0c
-
SSDEEP
384:CfUlGaSOzx3iBE+oEUlX4qgG0cQI8Tko4G24:lld3iBEzoqgbcbkBk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04dfe326f23157a71e6d4c4e84c0991e_JaffaCakes118
Files
-
04dfe326f23157a71e6d4c4e84c0991e_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE