scan
Behavioral task
behavioral1
Sample
410d4e6536206c8c37ca4e0bfa0480aa_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
410d4e6536206c8c37ca4e0bfa0480aa_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
410d4e6536206c8c37ca4e0bfa0480aa_JaffaCakes118
-
Size
16KB
-
MD5
410d4e6536206c8c37ca4e0bfa0480aa
-
SHA1
c9f6b46a6d23d4d08f27099d6d8cca7beb60b862
-
SHA256
7c93a4f5fe2e1396c9176f8b87cd0344d53144948938c480c5591d9cdb54ebb9
-
SHA512
71fa2603f2098c39922d0a2df7150bc335631911dfca96b51feef033afc15884107a9dbc9dcc4decc271754de977b3e7a6b9685f4984d9f4be1bb91de526c7e1
-
SSDEEP
384:mSOYDtnXwA4j6RZujcZ+Su0R3MMF0lQznG5ogKFpNVP:VSA4Gn4SdpWSnG2g8NV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 410d4e6536206c8c37ca4e0bfa0480aa_JaffaCakes118
Files
-
410d4e6536206c8c37ca4e0bfa0480aa_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE