scan
Behavioral task
behavioral1
Sample
3095201293c8109368f4e03d486e4058_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3095201293c8109368f4e03d486e4058_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
3095201293c8109368f4e03d486e4058_JaffaCakes118
-
Size
18KB
-
MD5
3095201293c8109368f4e03d486e4058
-
SHA1
60b88aeca7e42a21b85758f80473f33271e9320a
-
SHA256
effb58c6ad0c67fca795047ac021ebe192b9b8901acd55e5327839986c86f6cd
-
SHA512
b8d69fd0e33f2130a77cd9e8491178d260f12e28d76824bf622d158583d053ac9c655ec1f60c4e62053772e3e2d5200f056597d207f376cad0d858e7a2dec473
-
SSDEEP
384:nXrR43aToTJt6Lg6Ega1cfaQCJ0ptjbOvj:72KauGga1ZSXjbKj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3095201293c8109368f4e03d486e4058_JaffaCakes118
Files
-
3095201293c8109368f4e03d486e4058_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE