Behavioral task
behavioral1
Sample
3bcc55244d4648a579cb29087228e926_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
3bcc55244d4648a579cb29087228e926_JaffaCakes118
-
Size
315KB
-
MD5
3bcc55244d4648a579cb29087228e926
-
SHA1
81640dedcd1e778fbf7be0d844c4b6981eb83cf1
-
SHA256
d8f2dc5968cac080dfddd3c7943173f9ab49cd89dbdea8332490933d03638d27
-
SHA512
6263788d12749bf7f326706a978f9f638bad16becabda61fa63073d2de87594312840ee535c2efca050c9a0593616b3d161c5e958d2dd27e526cc1ca0e02e965
-
SSDEEP
6144:+K2votdvL7uq1yZQYZq9JYViRsA2Z/nwi753H3AvwKXg+a:+K2votdvLeRsTYViRb2Z/wiV3H30Fw+a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bcc55244d4648a579cb29087228e926_JaffaCakes118
Files
-
3bcc55244d4648a579cb29087228e926_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE