test
Behavioral task
behavioral1
Sample
03c60e6296407d12ca7aaf9da6403c6d_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
03c60e6296407d12ca7aaf9da6403c6d_JaffaCakes118
-
Size
16KB
-
MD5
03c60e6296407d12ca7aaf9da6403c6d
-
SHA1
01389e7ae962f561248f181b0c0559a00976cdfe
-
SHA256
7d67060d34bab3f19125cee413331014cc53bfb265d8b6af3280b51a079cbf64
-
SHA512
cab1441c8a9009354b2a98c0affcce8ead3727e64c48941842f87254e804ba289ed312b0cd50fa390c6f64ef68c6144542b165dfbd2deadca941c7c0df6344b1
-
SSDEEP
384:+bT2vyymB+96xcRqdDxeeVfEQN6V6CY7/JgcFJ3:Zvf0dDxeeVfEQN6ra/WA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03c60e6296407d12ca7aaf9da6403c6d_JaffaCakes118
Files
-
03c60e6296407d12ca7aaf9da6403c6d_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE