Behavioral task
behavioral1
Sample
4e1d6f8c64b8cf0d83f4026a2ac4f627_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
4e1d6f8c64b8cf0d83f4026a2ac4f627_JaffaCakes118
-
Size
102KB
-
MD5
4e1d6f8c64b8cf0d83f4026a2ac4f627
-
SHA1
ab4a6d0e0ff807f0247ca2431a6c0dbe9757a3b1
-
SHA256
6ed835dbdd8143015e0c4039e59121bee86b8b9456adece819e5b7a0373ff380
-
SHA512
3dbf31327f6b8612c4836eb38c5005cc2dacc7a96b0505a679c4b75541e8020c780bd16e896107f34808cfffb8b5723b217a01ece85519f1edde27dcccce3629
-
SSDEEP
1536:N5rwzoO0wRAAzCVle3ChpzQt8FSdBOrV1oTWq3w4EbTwOwbrn+xS/Jw:czo8mAWVa2MzgF4EbNenV/Jw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e1d6f8c64b8cf0d83f4026a2ac4f627_JaffaCakes118
Files
-
4e1d6f8c64b8cf0d83f4026a2ac4f627_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE