Behavioral task
behavioral1
Sample
3396d431d159861c7888a7b89e38d01d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3396d431d159861c7888a7b89e38d01d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3396d431d159861c7888a7b89e38d01d_JaffaCakes118
-
Size
90KB
-
MD5
3396d431d159861c7888a7b89e38d01d
-
SHA1
4bd8834f6036efb0b17ea6b3d91b88f69c5419e2
-
SHA256
5811a334e61923b67a3be1262e1aa694546028cbb8a53c50ec0bf5283561227a
-
SHA512
7b378165073a24bcc3f881d9be17b48e460871cc45de8fd2b0474b3836a06bd31517571aeb95d2999d9a2a0ab8cadfc470155627b89058bfb4581a75e901a1fa
-
SSDEEP
1536:dxBxPireSwAvtiBZHN4p0CbADrhHeznoJmHvQwH81ckxzzzs+vPfLlKx2OhN03oY:djxP9SXtiBZH6mWAD9sHvQwel/DCfhgr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3396d431d159861c7888a7b89e38d01d_JaffaCakes118
Files
-
3396d431d159861c7888a7b89e38d01d_JaffaCakes118.dll windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE