scan
Behavioral task
behavioral1
Sample
bf49050450be27a41395974d5b8c45ce_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
bf49050450be27a41395974d5b8c45ce_JaffaCakes118
-
Size
15KB
-
MD5
bf49050450be27a41395974d5b8c45ce
-
SHA1
4a67ed13de22e6b6a51ce1a326c66d26feda3b36
-
SHA256
27659bc53337ed5362ceedcc4724fd8ccffb596e828aa35aa1b4cd59ce77556b
-
SHA512
bb6e3919c7256d00bb72cbd46e7b56fe3ea5101dd8c445992de27b2beddb2d00099fbc5ea5fb7303509928f2f78dd277ca04347a7882f284f87d8cffae591e1f
-
SSDEEP
384:BrolGaSOzx3iBE+oEUl70gRi5pAhios5j6lEfj:BMld3iBEzKCMosIlEb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf49050450be27a41395974d5b8c45ce_JaffaCakes118
Files
-
bf49050450be27a41395974d5b8c45ce_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE