scan
Behavioral task
behavioral1
Sample
317c12ee10fa4906596abc6b6640ba4d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
317c12ee10fa4906596abc6b6640ba4d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
317c12ee10fa4906596abc6b6640ba4d_JaffaCakes118
-
Size
15KB
-
MD5
317c12ee10fa4906596abc6b6640ba4d
-
SHA1
caa58c5bcae8b487374795ef8a6d80d9b4c5612d
-
SHA256
fbd2f0379beb8375e73779af6a69ee04b77c8c75968e52b974a9d95a7050abe6
-
SHA512
9fb8a2266848e4102589fc89ee8e9840e42900a110901c0fa13d5dd3ecd845edc3e37d1ec8486b48b0c05fb691e9dca4b53b7c73f814bb220c6e227c56511fd2
-
SSDEEP
384:74lGE5b9Bps3Eg/nK6EiUSEKa5eNvFc/QEXERr4a:EppfGnbhUSEQNO/Q8Ep4a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 317c12ee10fa4906596abc6b6640ba4d_JaffaCakes118
Files
-
317c12ee10fa4906596abc6b6640ba4d_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE