Behavioral task
behavioral1
Sample
29a3c357e18b4ba7b4874e75a0f593f7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29a3c357e18b4ba7b4874e75a0f593f7_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
29a3c357e18b4ba7b4874e75a0f593f7_JaffaCakes118
-
Size
129KB
-
MD5
29a3c357e18b4ba7b4874e75a0f593f7
-
SHA1
51b89951782816ec704bf4aa3dcab4ec2f582f99
-
SHA256
cbbbd4e00a2a392e1513f9e0e93086106eaf992b9d6ae9a136396268d6b9e962
-
SHA512
75afd1f65005c47cbef28c0a9158394dfeaf9398dc2db514e5c45e823831e2672e1f1a655a8044780f2cbd88c92b0fe2391267b6fa9907de1c8d00309f3d2389
-
SSDEEP
3072:+ZaQ+Ij6lN/dE/HUt3ExEV0EfY1gS4lWpg9Dvh0rv4FGm2IkQrLnX:YT+Io/+vKEiV0Efg4lWkJ0rg8wr7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29a3c357e18b4ba7b4874e75a0f593f7_JaffaCakes118
Files
-
29a3c357e18b4ba7b4874e75a0f593f7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.UPX1 Size: - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 129KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE