scan
Behavioral task
behavioral1
Sample
ebabcf7452afdef2bf13babd9d79b271_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
ebabcf7452afdef2bf13babd9d79b271_JaffaCakes118
-
Size
18KB
-
MD5
ebabcf7452afdef2bf13babd9d79b271
-
SHA1
6604e8703f449b6a7371e902b1301a5d519f3d33
-
SHA256
01296cb31a1bee5ed4a370828e5b27c7a468600ded843d9d8b53380fa1ca17ef
-
SHA512
3496c4652f3628773a8d7bf8a0a540d375e179631f57301ead47a2ef300fbb94f84b8ea19b3cdda2021d474d546def52332f3341bd8d1e27caf73954f3cbf093
-
SSDEEP
384:/kDt0widTkeW4/JZQ05UXFJYRQT6WVoGe0uUrjgQgZzIuCc7:lwsPW8Zn5UXFJKQjdLu0gQNu/7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebabcf7452afdef2bf13babd9d79b271_JaffaCakes118
Files
-
ebabcf7452afdef2bf13babd9d79b271_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE