oris
Behavioral task
behavioral1
Sample
1032436ee79bdb6dfa7244054465b050_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1032436ee79bdb6dfa7244054465b050_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
1032436ee79bdb6dfa7244054465b050_JaffaCakes118
-
Size
38KB
-
MD5
1032436ee79bdb6dfa7244054465b050
-
SHA1
fa367a069ae95ad1d30f01396be672fe7d773af7
-
SHA256
9f079b8b0ed0d5cf970984923c748c4c0efe6aa78d8c6f53cb4c37fd19a2457d
-
SHA512
d36e3070e73497c080f26d9b76957d37728604f03f42c295a1ef0c1df5f743adbd09a44f3c0abc7c6e5a59af5636624b69195dce717133332645458938592395
-
SSDEEP
384:e4k8Yme+XfW6SAqqaYgUBYpvmymUeD2TiLtyJZA1EhxYnWSkWTsk4ryz:e4k8O+XRZaWBCxreMicAS3Skr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1032436ee79bdb6dfa7244054465b050_JaffaCakes118
Files
-
1032436ee79bdb6dfa7244054465b050_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE