scan
Behavioral task
behavioral1
Sample
c20cf73d5cfdce95b0b8dc104e5efb5a_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
c20cf73d5cfdce95b0b8dc104e5efb5a_JaffaCakes118
-
Size
18KB
-
MD5
c20cf73d5cfdce95b0b8dc104e5efb5a
-
SHA1
22243da82772418f843b86eca7019d7c747d2762
-
SHA256
469aad7d8107c6a28e648daa46311559c01e176da8af069bc7998c4dccaf6c36
-
SHA512
d67e73a9155287a5ff81013cd25834f36facc5eee68e9920a40ddc31d84c341ba70e5999b820b4d76cd34fdcb85cf9b234bcb05f7a5617d110eb786ea7b39a1d
-
SSDEEP
384:twt0widT0Mn/eh+mn1BxvXHS9mLI5lhgdImkCF5Jbs2X0YTcj:ZwsJeh+mjxvXS9mSlhghkCF5FmYT4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c20cf73d5cfdce95b0b8dc104e5efb5a_JaffaCakes118
Files
-
c20cf73d5cfdce95b0b8dc104e5efb5a_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE