outputmsg
Behavioral task
behavioral1
Sample
3df317f44dabb5f2b827b144a4502088_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3df317f44dabb5f2b827b144a4502088_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3df317f44dabb5f2b827b144a4502088_JaffaCakes118
-
Size
405KB
-
MD5
3df317f44dabb5f2b827b144a4502088
-
SHA1
9da4d5b2f00f625c1641da363a00b09ff14398ac
-
SHA256
4194b96b3422ea97c477b995604e72b97b61a5487e7cdfb9bbc496c91ea30e0c
-
SHA512
75d0cbf312f9501e8f2b83be0752b7863e13feac54041545ca03fd4bec0e993cfdc9a235f63847e61ee532e265b60b3b4ce2bcfccd5d834c69c2dab8fce7b9c8
-
SSDEEP
6144:Nowlm12hVSiVa8UhV9ffz/kLt/1zDu2BcFHjHPIh4WxRgwSubet:NlkoodhV9nbk1vutHOH
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3df317f44dabb5f2b827b144a4502088_JaffaCakes118
Files
-
3df317f44dabb5f2b827b144a4502088_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 133KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0 Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 152KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 42KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE