scan
Behavioral task
behavioral1
Sample
881d0ad3ae48122c4c012040b31c7d06_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
881d0ad3ae48122c4c012040b31c7d06_JaffaCakes118
-
Size
18KB
-
MD5
881d0ad3ae48122c4c012040b31c7d06
-
SHA1
f081042250b85ccf2a9662d87fe95d03ea9ae334
-
SHA256
4c07c638d24d9c9bf038a9ea1fcb3f642f93d809a2162a3b4d766ecfc4d14358
-
SHA512
714a3bbcd569aac3d8b7690b0cce8c02ac0e3df3d7662ca963bdd794ce430f1bf2a8ae413854a61811ac7e75476902c9dc9fa6d5212c02f522603b808226ab10
-
SSDEEP
384:2VW5DixReG0xWi7n6zFgKzND07xDfYq4K0cFmGWxzvgDW3yzCnGw:L+Rpyb6zWKzNDPcFmGEzYSeuGw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 881d0ad3ae48122c4c012040b31c7d06_JaffaCakes118
Files
-
881d0ad3ae48122c4c012040b31c7d06_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE