scan
Behavioral task
behavioral1
Sample
440a6339a66f8e9e44f5f7d0bfdd5770_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
440a6339a66f8e9e44f5f7d0bfdd5770_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
440a6339a66f8e9e44f5f7d0bfdd5770_JaffaCakes118
-
Size
15KB
-
MD5
440a6339a66f8e9e44f5f7d0bfdd5770
-
SHA1
5c33c49d923a436b817fec304ba1c15e7e291396
-
SHA256
cb3f89411f8057558a82f1de4e1b67a329d0952eda50113958e904139ac7219c
-
SHA512
cd8cbe58765cf4ac030461332ee7106e8f5fdf8ea8d592bc82c96521af48773becdc7740ed343edbfa1c9365cb60f4c340295a00a2be50fa62eef582f73c68da
-
SSDEEP
384:i1lGaSOzx3iBE+oEUlbPjBC5ZZv9zWjo1Z4YM:i1ld3iBEzb7BCFBW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 440a6339a66f8e9e44f5f7d0bfdd5770_JaffaCakes118
Files
-
440a6339a66f8e9e44f5f7d0bfdd5770_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE