scan
Behavioral task
behavioral1
Sample
d5d4be137d12f6086ea282d35b03997d_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
d5d4be137d12f6086ea282d35b03997d_JaffaCakes118
-
Size
15KB
-
MD5
d5d4be137d12f6086ea282d35b03997d
-
SHA1
ef04c5b024d283dd6166f82457bb41a64c9fe0dd
-
SHA256
c1a1586f04d65c1db95f59620643a141bcf2a868700b7f21d63d95c456f94e29
-
SHA512
79bf8c3719c4b46ff33e6153eaab53784a03a1ae89b387c7f0da9365c523486b037df606ed67e8a6eca9a09851d9d6781fd9f8a7e096844ff0c31c59dac373a8
-
SSDEEP
384:eilGE5b9Bps3Eg/nK6EiUS1NmG7Ezxv6cpalj1bLovr0WJYVl:pppfGnbhUS7mG7EzN6FjRoIWJYT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5d4be137d12f6086ea282d35b03997d_JaffaCakes118
Files
-
d5d4be137d12f6086ea282d35b03997d_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE