scan
Behavioral task
behavioral1
Sample
3c4971abd54c3ba6655e364a6be43db0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c4971abd54c3ba6655e364a6be43db0_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
3c4971abd54c3ba6655e364a6be43db0_JaffaCakes118
-
Size
15KB
-
MD5
3c4971abd54c3ba6655e364a6be43db0
-
SHA1
2494ce91d7b5544502e28d0e96a889a73d68b94d
-
SHA256
f06c9e69668b77dbeedc4475da3c0d61e17bec989cf0741eee117ae6d720a3fb
-
SHA512
17a82c63c8c014259a5c57da2430c35624f371b1df6498184f7d453af834ab1a5d9513374e0d93eb8797008fbb9d76b7115c3bc922240b8e5df2d3c8cf475005
-
SSDEEP
192:tPtIopBK7FfSY37Hj+Rt0iZv8BXZYYgCNA8hkoX462Nx42QHnoY/qVCLn:dtAhSM6RR4XZZgCNA8hd70mTHN/EEn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c4971abd54c3ba6655e364a6be43db0_JaffaCakes118
Files
-
3c4971abd54c3ba6655e364a6be43db0_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE