Behavioral task
behavioral1
Sample
5fe28b3408355c830b069a0613992373_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5fe28b3408355c830b069a0613992373_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5fe28b3408355c830b069a0613992373_JaffaCakes118
-
Size
60KB
-
MD5
5fe28b3408355c830b069a0613992373
-
SHA1
c1139b75cb8fdc9568b106336312231261654a35
-
SHA256
d546500755342c18f1c0991983c0054714e892f21c4dd90f7f716deaca90bda5
-
SHA512
a00e12be3c1abc01932bcd536a361f01c0c61552a284db663498cfb150c70180b917898feadb41cb1594ceb2e5cf8950a851d8d4224d83b028174bd6128fe184
-
SSDEEP
1536:RgSVv5tBFd3Qz3vZjs0FiikYPav5oywmOdq+:a+vZb3Qz3vZjs0gikYPo5xq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fe28b3408355c830b069a0613992373_JaffaCakes118
Files
-
5fe28b3408355c830b069a0613992373_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE