Behavioral task
behavioral1
Sample
2703638ca25b17f47760768c4941c00c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2703638ca25b17f47760768c4941c00c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2703638ca25b17f47760768c4941c00c_JaffaCakes118
-
Size
156KB
-
MD5
2703638ca25b17f47760768c4941c00c
-
SHA1
086b80ecc3c1b65ada84e44d5aef7fb10257c3b5
-
SHA256
cac8daeb2c53200e47fe168b69cafbdb4f41d6d9de6dfe5a4e93028303521216
-
SHA512
c212b2f73a2cf9e231bc55644868b252932143579d5ac6b3bb1da2775e35ee150915dd9679f3b00a6f9d0ade0b172b22d50e2f63575e975b9246cd7bdc55c820
-
SSDEEP
3072:n5Iq+Waq0ZCOc9NA3m1qYNMDGuVcX+ujemjHVh+cDOAzpSD9IBQmbL:L+Waq0ZkNfwFVcX+uCmj1hESAwQmv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2703638ca25b17f47760768c4941c00c_JaffaCakes118
Files
-
2703638ca25b17f47760768c4941c00c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE