Behavioral task
behavioral1
Sample
235f6f43eb669ca8203fe332a65185dc_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
235f6f43eb669ca8203fe332a65185dc_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
235f6f43eb669ca8203fe332a65185dc_JaffaCakes118
-
Size
869KB
-
MD5
235f6f43eb669ca8203fe332a65185dc
-
SHA1
62fa768f7bced7d50d92ba047d815aaa240d5382
-
SHA256
e02aa169b9b5570ad51e5160b9136ac60479b0f34f925197918e48aa4f37394b
-
SHA512
177e4f27e3b6f2dd48e21e3e043b1f092e3811636a92e5bc02975aece8272e05d6d29396daceffa62a00badf133d4104fd1475a6906f8da5ae25f16c9c5f897c
-
SSDEEP
24576:4l30trFGpqLHgj6Ym37TKvdOTII04siz:4LpejlakclYz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 235f6f43eb669ca8203fe332a65185dc_JaffaCakes118
Files
-
235f6f43eb669ca8203fe332a65185dc_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 865KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE