scan
Behavioral task
behavioral1
Sample
2c6403aec769ee1c56e33f0d3025c73d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c6403aec769ee1c56e33f0d3025c73d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2c6403aec769ee1c56e33f0d3025c73d_JaffaCakes118
-
Size
18KB
-
MD5
2c6403aec769ee1c56e33f0d3025c73d
-
SHA1
2a20795b64f578af7df49383f59725748596635c
-
SHA256
a3926323063b92bd04729ef57cc15e8aee573dee7a517cbff6edea18c14cc20e
-
SHA512
ff229eca8d83d8f06818c24a36d002e0a2b0b2546798fc80cefdd13c49480e0c8c2d0f5faacb52a8a6923c749a57cbd06c363b2f6561c62001f6fc31b5b4b952
-
SSDEEP
384:5RlBVFTElh1WDjnacEsGmF5x9gT+3sfgWA5P+JqItaEhUb+VrlmGZH:TlFT6h1mbatsdF/+a3zDJSqDX+5me
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c6403aec769ee1c56e33f0d3025c73d_JaffaCakes118
Files
-
2c6403aec769ee1c56e33f0d3025c73d_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE