Behavioral task
behavioral1
Sample
0540de0ded05494d969557aa4d420215_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0540de0ded05494d969557aa4d420215_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
0540de0ded05494d969557aa4d420215_JaffaCakes118
-
Size
18KB
-
MD5
0540de0ded05494d969557aa4d420215
-
SHA1
0c758e19cdc39be81373d94bab060496cf062215
-
SHA256
5d972505039029b7f7e839bc5ffe9e304f5792ad7df2b422e73f78b199ab66f0
-
SHA512
f35c174f54bf7284c15926c81a3d2c9abd02af6369b9c4e3ceb80968bde3c86883c75103313814ed376a7f50a0b6d6b6e46dfd45c292eb765fcfe57fc55e82a2
-
SSDEEP
384:7AepXt+I8leMVvdi0rt0DjmIm237wFlvIhyhw9gqihPzHj9dOiKa5:RDMVreP3kFhIwhwahPzH29a5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0540de0ded05494d969557aa4d420215_JaffaCakes118
Files
-
0540de0ded05494d969557aa4d420215_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPXA Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPXB Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE