Behavioral task
behavioral1
Sample
19591f320beee1d2b7abd244ac3e04c3_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19591f320beee1d2b7abd244ac3e04c3_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
19591f320beee1d2b7abd244ac3e04c3_JaffaCakes118
-
Size
104KB
-
MD5
19591f320beee1d2b7abd244ac3e04c3
-
SHA1
bab6fe4a8e9f75ca9770bd897cda68be903f3f8d
-
SHA256
4546c831540dc03b2c90e5bb04181a2c0fb3687e273ef53297f840e1f312007f
-
SHA512
c91144a92a49054d74146ce1cd6499d751b7b982b1665686e271bea88520497998bfc38b5e26ee569333288172fd07b0ebee2c7d782cb55af8df30ca36d6ee65
-
SSDEEP
3072:4yOtgCNPbAHuzueAlwsKmiiEHpmBt7tjBwHH1En:FOtRsOz2xKmGH8JBwn+n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19591f320beee1d2b7abd244ac3e04c3_JaffaCakes118
Files
-
19591f320beee1d2b7abd244ac3e04c3_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 165KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE