LoadProfile32
Behavioral task
behavioral1
Sample
dddbf7bb9cda26063fef5dc9c68f1260_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
dddbf7bb9cda26063fef5dc9c68f1260_JaffaCakes118
-
Size
60KB
-
MD5
dddbf7bb9cda26063fef5dc9c68f1260
-
SHA1
b771b6d266b5aeac1e23d75ee738659dc4466c3c
-
SHA256
1798ac7dfeb9e12e6bdf671f3e427cec516ec8e4de01a1eb4bd29d5a66dc81e3
-
SHA512
80cd0f80a10968c328be1123a09f04a87052d8c8c410f87e8a6ec4292c9f009154bb0e7ee5b96adc53fe1e089143de0abf12da63d1397991e7e7e185c88b89bd
-
SSDEEP
768:QNgcfaP4hKozMWR+FLMWCFzm6p3008te+BHrW0zYwqQO:PmaPCKoA5IMVzJrW0zmQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dddbf7bb9cda26063fef5dc9c68f1260_JaffaCakes118
Files
-
dddbf7bb9cda26063fef5dc9c68f1260_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE