_AvisynthPluginInit2@4
Behavioral task
behavioral1
Sample
951c29336a49effc5fa1e1d6e8215a5b_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
951c29336a49effc5fa1e1d6e8215a5b_JaffaCakes118
-
Size
443KB
-
MD5
951c29336a49effc5fa1e1d6e8215a5b
-
SHA1
be2a0fbe202e9be84c9cca9aba205e5ea15bffd5
-
SHA256
2d5cbbd7d9e14ec195721cf66c2242a70ec563d5c72e9ab77a093eaeadb32b12
-
SHA512
ae03a9207e982353de719d5f1b68bc6565dad9afd40e6dea7ed1e664170cef07b263dd857529271fef34a3874bdbffd4fa7f2315fc4d410bd02b30d31fc28a22
-
SSDEEP
6144:kv5FOk0q1OuXt/hmBAjGEki9TBskKRkskWAijYiFZgLG:kv5Mk0qTt/h4X5i9T9W9jnW6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 951c29336a49effc5fa1e1d6e8215a5b_JaffaCakes118
Files
-
951c29336a49effc5fa1e1d6e8215a5b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE