Behavioral task
behavioral1
Sample
5d7a41e1eab07e83d43f15c6e60f62d3_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d7a41e1eab07e83d43f15c6e60f62d3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5d7a41e1eab07e83d43f15c6e60f62d3_JaffaCakes118
-
Size
877KB
-
MD5
5d7a41e1eab07e83d43f15c6e60f62d3
-
SHA1
ebbf91c672d9cc34656c84410805eb463af3290a
-
SHA256
9c48dab1248456c17e95456d708bfd1cff5ebcc9aedff148208653da581169df
-
SHA512
4e145f95ab5d4cd9a6005add3a9701af88a21722e77a67a0241c21141ee5d56124bbec386776ba8e5ea81881003220cb26ce7ae5b98a4c48a97f050fb2648423
-
SSDEEP
24576:tSaZLoDSGS23bc+JD7ptmEv77E5QiAw9k:tS2MSPGw+JD7pdv5wa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d7a41e1eab07e83d43f15c6e60f62d3_JaffaCakes118
Files
-
5d7a41e1eab07e83d43f15c6e60f62d3_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 873KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE