scan
Behavioral task
behavioral1
Sample
6903e276dd99041924fd9ae7c746bfb2_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
6903e276dd99041924fd9ae7c746bfb2_JaffaCakes118
-
Size
16KB
-
MD5
6903e276dd99041924fd9ae7c746bfb2
-
SHA1
104b290ff05d43a9d8656bdcbf1beb6a979db67f
-
SHA256
6c7e5f9a4c1057b6df1d346885637ca810cd18284f03519a63cf176a458ce6a0
-
SHA512
071b355b61023bd879de17fd5f745f899e27ae7ddb3b975c2ae1d93ce8506228c04ee805c6b0289291ef516fa57474d3cfe2e332d898c61b6ac2deac68ae8bd8
-
SSDEEP
384:JxOYDtnXwA4j6RZujcZ+Su0zVpFMF0lQznG5ogKFpNnH:TSA4Gn4SdzqWSnG2g8Nn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6903e276dd99041924fd9ae7c746bfb2_JaffaCakes118
Files
-
6903e276dd99041924fd9ae7c746bfb2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE