scan
Behavioral task
behavioral1
Sample
11c76d6ef3939461bc368f04cdf09799_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
11c76d6ef3939461bc368f04cdf09799_JaffaCakes118
-
Size
15KB
-
MD5
11c76d6ef3939461bc368f04cdf09799
-
SHA1
c9e81515f78914a088ce9df9da69af523594e3fe
-
SHA256
e91a55253c43fa64833ab78afaa7cf1257414d0981105eb5d4197fc6d93e610a
-
SHA512
9bfe7930615c2dda7ad0caf6a601523d5fb9348ae7823fc70529c6f7e457587d008d003ca47fe235231c9ea97be812c6e677a22a198c58eee07e06fbbc8c0024
-
SSDEEP
384:o/MlGaSOzx3iBE+oEUlV4OZ6j2dw6e1qEc2j/znN:fld3iBEzVxZ6j22PcoznN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11c76d6ef3939461bc368f04cdf09799_JaffaCakes118
Files
-
11c76d6ef3939461bc368f04cdf09799_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE