Behavioral task
behavioral1
Sample
248958963c7e22ba53fd5bd073eb3eb0_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
248958963c7e22ba53fd5bd073eb3eb0_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
248958963c7e22ba53fd5bd073eb3eb0_JaffaCakes118
-
Size
46KB
-
MD5
248958963c7e22ba53fd5bd073eb3eb0
-
SHA1
d07437a9f72edfefc160abc51a7090d5283888db
-
SHA256
c87dac14176b9b2ac48ad8de5ad9bdf56ee89499201799545197e67d11e78e22
-
SHA512
15e826c2bb5372aed90ea07f23f71f7f5748d2da9567029adb8f796da9dc17d067dacd2e85198e63736ebd39b2f4693d1cb4fb2d2e1b7a7171451ea0806d7b86
-
SSDEEP
768:BEP2zpzkSPbsPnJMY74Li5Bj+L0FvjwzwZVWiz3EBUK/hSpP5O/exDgwA4I8wlbW:mPuzbLW4gCL0FvVqY3G/hS/HA4I8wx9g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 248958963c7e22ba53fd5bd073eb3eb0_JaffaCakes118
Files
-
248958963c7e22ba53fd5bd073eb3eb0_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 648KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 351KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE