Behavioral task
behavioral1
Sample
28fef3f5b09c0f5ce8de5fdb72ac6f8e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28fef3f5b09c0f5ce8de5fdb72ac6f8e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
28fef3f5b09c0f5ce8de5fdb72ac6f8e_JaffaCakes118
-
Size
159KB
-
MD5
28fef3f5b09c0f5ce8de5fdb72ac6f8e
-
SHA1
ed3998fe185d30f7f8924f4541145c9ba5bdccb0
-
SHA256
726e76fd46ed28edd98ed4396b238c09157f24b9cdd8f71cb246e97059be2ba1
-
SHA512
5d26ef271e7684222b649fc1a10ed7dc080b87b9867c75f6eda8546a7704358331d7a47e505eef66f9fbe711ee87ccda2449f520cfcda1602e6d2a904553ad39
-
SSDEEP
1536:xrdWZ3hFErhYmTVGnSBlwC+QU0SRGRqKQ0fNDvs8Fb3+6dY/NMWLMfMnouy8:xrUFhFErbGnSLml0FHb3TCKWQfMout
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28fef3f5b09c0f5ce8de5fdb72ac6f8e_JaffaCakes118
Files
-
28fef3f5b09c0f5ce8de5fdb72ac6f8e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE