Behavioral task
behavioral1
Sample
2fcfae939b2f47b8ec198006c12a421f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fcfae939b2f47b8ec198006c12a421f_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2fcfae939b2f47b8ec198006c12a421f_JaffaCakes118
-
Size
46KB
-
MD5
2fcfae939b2f47b8ec198006c12a421f
-
SHA1
0c84562a52f8d79d0011180e4747abdba8a7fbb9
-
SHA256
c0f4c67f5ef33fdd922f8628d547319476a1c7047a4532ff97b3e046f40e8533
-
SHA512
a4df16ebe5f1b353135306c01bd38570a541913dd94ff5cfa69746701a3a5129b9c1548b5f8a24b038de5019ba328bb2b44e9a21375dbe4d088f04d9a096b7d2
-
SSDEEP
768:0HNUtm0j1c55GVgJyl+9c/U8PJKq115FhwwVofzHDoW3npnKux3+NuoSll:ltmTWUyzriDDoW3pKWONu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fcfae939b2f47b8ec198006c12a421f_JaffaCakes118
Files
-
2fcfae939b2f47b8ec198006c12a421f_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_SYSTEM
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE