?Init@@YGHXZ
Behavioral task
behavioral1
Sample
368e4bf2a91af13f158ec2c2ebab2748_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
368e4bf2a91af13f158ec2c2ebab2748_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
368e4bf2a91af13f158ec2c2ebab2748_JaffaCakes118
-
Size
85KB
-
MD5
368e4bf2a91af13f158ec2c2ebab2748
-
SHA1
dbcbf1828b7f94e7da2a9a43d57438115e0a9d7b
-
SHA256
c1e8cd0ac0bb740d68cdb9aadcab98df2b327e16ea7e52175a9b63c9366aada9
-
SHA512
7b04d77a8b23d81c64bc5c2aeda1c628f0587b2ee9e45e41f5fbaba3745eb5d117cfaa9ba35e263e3d9b510b21e925c4e574d70a9487d981ea76bb5987b230ea
-
SSDEEP
1536:BHsNoIOAzts1bfiarWsPXPYQTwYpkKak:BTIrJsKGxTw0kK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 368e4bf2a91af13f158ec2c2ebab2748_JaffaCakes118
Files
-
368e4bf2a91af13f158ec2c2ebab2748_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE