��VWH�bg��t7HtHt�M�?Wj������$PK
Behavioral task
behavioral1
Sample
471a27267f34c725d7da898b025405df_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
471a27267f34c725d7da898b025405df_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
471a27267f34c725d7da898b025405df_JaffaCakes118
-
Size
19KB
-
MD5
471a27267f34c725d7da898b025405df
-
SHA1
23d0b706ec976feb8ccdfb200e0f2d8b9af8899c
-
SHA256
5e772c790a3c691c00115004d59c387fb7a4f67f9ab0d111034397f841f945a1
-
SHA512
4244e267ada1436f394797505b816416aa0328cb03c5385095ad9bce7e0deaf683738eb389dc3af5586558a4727c3325e4b9927cdb1e9196d7219c30806e40fe
-
SSDEEP
192:9M63Ge8W3l0vdV+mwxbwH0GGY4NM3fWTk2he5vpHMRW+50ol+QoK6IMAl:x2s2vDAbwUzWfWTkye7HMd5DlFDMAl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 471a27267f34c725d7da898b025405df_JaffaCakes118
Files
-
471a27267f34c725d7da898b025405df_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE