scan
Behavioral task
behavioral1
Sample
15550eb55ec27eaca47d9cb2bb8d4dd1_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15550eb55ec27eaca47d9cb2bb8d4dd1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
15550eb55ec27eaca47d9cb2bb8d4dd1_JaffaCakes118
-
Size
17KB
-
MD5
15550eb55ec27eaca47d9cb2bb8d4dd1
-
SHA1
4eb5d9c63c0dd1e8d85ca696c5353775de6df981
-
SHA256
9df2914ada31a9b54a3d277f62c6168bab39a743ac7fcec190647f939c1af137
-
SHA512
c17c0541faaaa3fa31d43244f881dd104d24d193237ca7299b207580116636b82675ad26c4de1d203a246f350552e6d4176ed1bd35bf26b6af599a9fbb903165
-
SSDEEP
384:Kb4qbavU+OmtN8uuV1K6M7R3dCSLNRn22+mB2IXCTCKUgLL2:KsqoA+NhkQ3toSLNRTrBrllO2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15550eb55ec27eaca47d9cb2bb8d4dd1_JaffaCakes118
Files
-
15550eb55ec27eaca47d9cb2bb8d4dd1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE