t
Behavioral task
behavioral1
Sample
343e3787095aca48e58a0d851e0f5515_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
343e3787095aca48e58a0d851e0f5515_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
343e3787095aca48e58a0d851e0f5515_JaffaCakes118
-
Size
227KB
-
MD5
343e3787095aca48e58a0d851e0f5515
-
SHA1
4720debd36f1dde753c3240f86e06033eba9e2d8
-
SHA256
9488db7efb7d36497fed614407e658c36c909ccfcd2cb9fd6fb47e2fc7cc6a1c
-
SHA512
87edcaf071677c8877f4ef812321b6b53a37cee9e86977910caa09abd562aa7493517007397c1106e5e11fce87fbff34f02dc17f8bc2c88538b1089d25954291
-
SSDEEP
6144:CMCW3e0dZfFgCZTdsmnElEna7r54nPBrtkgSky:V1dTdxGmnOV7r5oJrigSd
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 343e3787095aca48e58a0d851e0f5515_JaffaCakes118
Files
-
343e3787095aca48e58a0d851e0f5515_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 209KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE