Behavioral task
behavioral1
Sample
192d515c57d3a0a03da4c4f21130eb11_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
192d515c57d3a0a03da4c4f21130eb11_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
192d515c57d3a0a03da4c4f21130eb11_JaffaCakes118
-
Size
191KB
-
MD5
192d515c57d3a0a03da4c4f21130eb11
-
SHA1
75fc52628d17f5c068ee3a688de8bda5e6a846c7
-
SHA256
43c574b691f12553a91db60ec593b1781e22bebbaa9711e54f19952540e9a280
-
SHA512
fa700c5904ae3695d3b623657a6aee81ea82ae8415b462aa8086a9730c4c7c46779db6e20defd70e59eeafc0000ab95da1467e366deb0394ef1f222782462cf7
-
SSDEEP
3072:9lmJp6SeoqJ1QiNYXH3Ga9C002assIZzVbUpB10vQML/TDLDiwbxIiyvnj9dt5bi:9lmOSzcLNYGa9CsaszhVbUT+xL/vLDuE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 192d515c57d3a0a03da4c4f21130eb11_JaffaCakes118
Files
-
192d515c57d3a0a03da4c4f21130eb11_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 756KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 368KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE