scan
Behavioral task
behavioral1
Sample
0f64f3004409663feb5a2bf83e9dcb6b_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f64f3004409663feb5a2bf83e9dcb6b_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
0f64f3004409663feb5a2bf83e9dcb6b_JaffaCakes118
-
Size
15KB
-
MD5
0f64f3004409663feb5a2bf83e9dcb6b
-
SHA1
88f2d2d4d7c69f982e5f51ab254183bf335c79fd
-
SHA256
647f98b4252b667efa6c67df693e89651417c46646fb820d9c09e3bf221ade7b
-
SHA512
3e7e2925f02a0867ab58a089a52c6197efd2abd5cf68b0c5d016ca0d462fa18a42f78602e575750ce669b55a9ca2df600b771c2f25d626374d547df25842b037
-
SSDEEP
384:gqY1tan0OukkPnw11m6MrctBJ4ecWvu1vMpARYWNzGa3G:C1t7xrnw26Btw5W8vMCz1b3G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f64f3004409663feb5a2bf83e9dcb6b_JaffaCakes118
Files
-
0f64f3004409663feb5a2bf83e9dcb6b_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE