Behavioral task
behavioral1
Sample
65c5284f66548868a72fe9972d5b37bc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65c5284f66548868a72fe9972d5b37bc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
65c5284f66548868a72fe9972d5b37bc_JaffaCakes118
-
Size
139KB
-
MD5
65c5284f66548868a72fe9972d5b37bc
-
SHA1
5cb727804190c9bb54e0add5ff2664a397c70979
-
SHA256
909a62456e088ec0c914b020df32af3edeff822a867681c40e9e9cf5f58fc6b0
-
SHA512
b6a8cc75d8ee071a446bad676d4709a09de5fa3d06907b588f9d890ea46b74630ae36f2daf4be06948ee9a1957be50d39ab170638a74939fb749d7a569f24ffc
-
SSDEEP
3072:7TH2Y96HM0XnpvTyQvGn+nCuhTr8npE3dvvq9aGNLlchVNvCCX969I0C:7jP4TyQOI5JgpcvqNplchPvCC6Q
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65c5284f66548868a72fe9972d5b37bc_JaffaCakes118
Files
-
65c5284f66548868a72fe9972d5b37bc_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Sections
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 134KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE