scan
Behavioral task
behavioral1
Sample
196299ec259eb95dbfee3f5ab350746f_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
196299ec259eb95dbfee3f5ab350746f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
196299ec259eb95dbfee3f5ab350746f_JaffaCakes118
-
Size
16KB
-
MD5
196299ec259eb95dbfee3f5ab350746f
-
SHA1
a5b6442e7af56bdcfbd3e40a24c1a5c23aa8dfa0
-
SHA256
b6915e41a05136d0244a1908993152217c260ca1bf1925f9febab3d0f009b028
-
SHA512
bd76707c4d4b8383543755bd5b06c7c82180b70529498ae13c9d94506839be1f5e146ac11716e135f6d087dd56691d9cf53a47b4dfbb46481307ec788e21095b
-
SSDEEP
384:wbOYDtnXwA4j6RZujcZ+Su0yk+fCr3CMIWEo2CqPuiO3:wbSA4Gn4SdcCrBInji
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 196299ec259eb95dbfee3f5ab350746f_JaffaCakes118
Files
-
196299ec259eb95dbfee3f5ab350746f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE