Behavioral task
behavioral1
Sample
357fa70da35689863e11b7906fb5563a_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
357fa70da35689863e11b7906fb5563a_JaffaCakes118
-
Size
4.5MB
-
MD5
357fa70da35689863e11b7906fb5563a
-
SHA1
5b50d59ca9266714160a3a8c214853d2d47adee6
-
SHA256
66b9ad4d585354162d9ab4dd346d7dc5f0b254e42e4fcffdcdecfc5977827742
-
SHA512
c92c8ce432782edbc2c1060928677e0c2b2b5aa8f5dc7145052c03c991333d1bbfd1e61329a515f21a7335e80678fe13482094db20c107fd55b6c8d073219fb1
-
SSDEEP
98304:FS7yfWArhpTpoVBODe4klDYzWAMv4VQ4Lm/QNLzwX+zoW:F6QW0hpTuLO63jpYQ4Lm/KM+EW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 357fa70da35689863e11b7906fb5563a_JaffaCakes118
Files
-
357fa70da35689863e11b7906fb5563a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE