Behavioral task
behavioral1
Sample
2b98d7f3226846be0f5ea74826cec3d8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b98d7f3226846be0f5ea74826cec3d8_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2b98d7f3226846be0f5ea74826cec3d8_JaffaCakes118
-
Size
39KB
-
MD5
2b98d7f3226846be0f5ea74826cec3d8
-
SHA1
51ad2ad3be03d68ffac563965617146640eec298
-
SHA256
49db1ccf6313a9a50dd1cde73dbd9a18a914e0fdcc7dc80b49675e115d1e30ba
-
SHA512
51b6d09c884dac3a00eda701c95df4e8c94e1bf95765323176015963ecaafa461465d2632a6db73810f7b0703d42d784325636a5fc3679888ef67382fc5d9774
-
SSDEEP
768:3i00+F7sA6HTN1hNV9vjVyfhPSWft7HJCNg9WanjQv50HZBpxZdeV:Sr+FxITjhNvvjGPSct7HJO4ZV
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b98d7f3226846be0f5ea74826cec3d8_JaffaCakes118
Files
-
2b98d7f3226846be0f5ea74826cec3d8_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE