exeb
Behavioral task
behavioral1
Sample
667b659703145f741a3c7e1c09477fa1_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
667b659703145f741a3c7e1c09477fa1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
667b659703145f741a3c7e1c09477fa1_JaffaCakes118
-
Size
38KB
-
MD5
667b659703145f741a3c7e1c09477fa1
-
SHA1
51c7ae0a50413016ce9c2075c1f16dd8996cb520
-
SHA256
e19952e99c1893e9e3ff037235cb5f567eff2ea5aa24a22eaf75113c17c12241
-
SHA512
3c4ffa09bf96bce73bedd46f70330ac806a1c293a86068a1967e5149451866e3fee2151a656370fd1da4276348b494166111bb119d9c9f52dd291f028b15df07
-
SSDEEP
384:g4WLpsN6EU8Y+fY/7jkzDdKHV5eAogVTY0HLpUiJjltgZiJ6DXWLWdCAh:OLpE6Egx6pK/oCTbUsjlHM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 667b659703145f741a3c7e1c09477fa1_JaffaCakes118
Files
-
667b659703145f741a3c7e1c09477fa1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE