scan
Behavioral task
behavioral1
Sample
dfe95867202ee937afbe6c1564cfff4b_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
dfe95867202ee937afbe6c1564cfff4b_JaffaCakes118
-
Size
15KB
-
MD5
dfe95867202ee937afbe6c1564cfff4b
-
SHA1
f3f25ab8d02705e7c820b92d438d08c06fe7df6a
-
SHA256
667994d55af687c2df195e0386014f037fe878c5b08826c53ac874ba8880abcc
-
SHA512
a374e419768d928342334e4d69f125418dbc084bbcd91391047e9ad3a777e5c3072ae5142e3bdda8b2ddd674a835236e4b8ce5bbd1f0d9c4b909c636e15f964f
-
SSDEEP
192:QL8c/s0HIHV6XaRtwTOgYj9TnIQDLiyU61PKD4A6S7bZfp0YPNiZe48YOtOAekAN:C341tRxgg9r9n1SX00cz8Y+d++wJDVd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfe95867202ee937afbe6c1564cfff4b_JaffaCakes118
Files
-
dfe95867202ee937afbe6c1564cfff4b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE