test
Behavioral task
behavioral1
Sample
a8215eeed149b5cde50ab927aa80a32b_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
a8215eeed149b5cde50ab927aa80a32b_JaffaCakes118
-
Size
15KB
-
MD5
a8215eeed149b5cde50ab927aa80a32b
-
SHA1
21ca74088dce0358306fa32db406afbead301062
-
SHA256
d54736b1feec493ee5d48787bcd8420ac09a8c5cb89b6e6ec2be805c3dc5a565
-
SHA512
fc337e6780f1d98f10468aab9e35dcb59fd90c7b20a7345ea39797fd23add7f591a1eed39a8580eaef7c18e3988353f08667db0a2fdc8d1b5e92848bc1270da2
-
SSDEEP
384:e5Nefa0nCpN7+t7r6kRMNjy1ObcXj82jG8L+ihiF:HfbCp4tykRIoN48U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8215eeed149b5cde50ab927aa80a32b_JaffaCakes118
Files
-
a8215eeed149b5cde50ab927aa80a32b_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE