scan
Behavioral task
behavioral1
Sample
6fb3681b87e12966e9beb5f00b8fa4fe_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
6fb3681b87e12966e9beb5f00b8fa4fe_JaffaCakes118
-
Size
15KB
-
MD5
6fb3681b87e12966e9beb5f00b8fa4fe
-
SHA1
089b39e5852a7990f18bcfe1da9e7636f5cc34a9
-
SHA256
b0123f51984ec24c43818503db26fdb7371ba7debdaa75eabb7de21653a6a7ba
-
SHA512
0159acd312b93d9403e895594d50f3b94458aed9ff183c73735d0c8e2ba6e50441e19c185a8ba409f2a043f7af1f9e5fc079cd65f455f91e54f5ca90dbb21b99
-
SSDEEP
384:4GlGaSOzx3iBE+oEUlnrDGNbEDo4Ec2j/znH:Hld3iBEznrDGIoxcozn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fb3681b87e12966e9beb5f00b8fa4fe_JaffaCakes118
Files
-
6fb3681b87e12966e9beb5f00b8fa4fe_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE