t
Behavioral task
behavioral1
Sample
356419bccfac5bdd29287845c8e02731_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
356419bccfac5bdd29287845c8e02731_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
356419bccfac5bdd29287845c8e02731_JaffaCakes118
-
Size
227KB
-
MD5
356419bccfac5bdd29287845c8e02731
-
SHA1
4a3075b2354a5f9b4a4f05a6c6081c6dea1b44b4
-
SHA256
52c96124176bb48823e050353c229856ec78e1e945f81c25a21ac46629892b47
-
SHA512
0375aa91c25700e96e661f78b8853cfac70f4f080ef5f67904d678c12d60992c37697b68c7b0e7b6ffd118e30c5d74eb3be98d447112ee63acc07ba129bc764f
-
SSDEEP
6144:CMCW3e0dZfFgCZTdsmnElEna7r54nPBrtkgSk:V1dTdxGmnOV7r5oJrigS
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 356419bccfac5bdd29287845c8e02731_JaffaCakes118
Files
-
356419bccfac5bdd29287845c8e02731_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 209KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE