test
Behavioral task
behavioral1
Sample
8681ed41878f2fe94cb4eb3af5ba0e43_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
8681ed41878f2fe94cb4eb3af5ba0e43_JaffaCakes118
-
Size
15KB
-
MD5
8681ed41878f2fe94cb4eb3af5ba0e43
-
SHA1
bdfc7926163417cebbab7ce5c2852f8522108a9a
-
SHA256
ca48f8b166464ac45b4da2967b7bc28d430fd4ca09c493aa8057502148241f5a
-
SHA512
cfb441da5c68b4a79648ac7bff9812a8a7b77b15f2c78b5deb5967aa502b1e1be1e923d5c13de77972d0d3182b80dfb91ac011f00f8a8e058b4eac5c6883baa3
-
SSDEEP
192:kH8LCYvg4mFziiPATKwE3/o0kEX86ERlQzT/G+9LuzgWRUtkiSgwn7RsdwiDq+Ly:EOCYsgKhxkW8FRWv9wFUtkEw7Rv/+L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8681ed41878f2fe94cb4eb3af5ba0e43_JaffaCakes118
Files
-
8681ed41878f2fe94cb4eb3af5ba0e43_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE