Behavioral task
behavioral1
Sample
2cbdeeabf70bbf8612c6831263b5f3a3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2cbdeeabf70bbf8612c6831263b5f3a3_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2cbdeeabf70bbf8612c6831263b5f3a3_JaffaCakes118
-
Size
30KB
-
MD5
2cbdeeabf70bbf8612c6831263b5f3a3
-
SHA1
0720be309219ebcb987dd44604dc88e2d2cf4aea
-
SHA256
24e2c0c308f958bb2c4a7052bd7ae103ca31312a4e8d9f9bf135411cc81cd92c
-
SHA512
a56825cfda3ac2adcc325a5fa8338cf73526db4ce36998405c85b66127ba7ea186f4e8b528753ce454fe7de2967d273a0d7d47d945fbe0ab3750e66e60fa968f
-
SSDEEP
768:pv4btmx6unVUKV2Wp4PL4f4v9Tmxs0TWsubV8fVy8DhfMgMl4dg/CCpDl:pe6nq7fj/qxdWsi8RdMmq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cbdeeabf70bbf8612c6831263b5f3a3_JaffaCakes118
Files
-
2cbdeeabf70bbf8612c6831263b5f3a3_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ