Behavioral task
behavioral1
Sample
6a718dbc8ebd9236743742dfd814d60e_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
6a718dbc8ebd9236743742dfd814d60e_JaffaCakes118
-
Size
967KB
-
MD5
6a718dbc8ebd9236743742dfd814d60e
-
SHA1
c1bf287af7c73d5fb74dfc52ff637d5b237f6ec9
-
SHA256
420f01e4e43c4ae8d9483e5b1c14c4ec01bd81cc6abf7c79797c1a67793553d7
-
SHA512
812cef92d084fe70382f3f6e04fa40774f10f13bedda812e76abcd2c16a8bd8b20d2e2807be7ab6d22acc7296df0462b34ff281e2f23f6d8f5efa2988a610b32
-
SSDEEP
24576:MGo6iFctWwGwmzf1I2iYrpRzEidaa2vQXxLW7Eyqdxr6uzGJF:Po6i0GwYnpd+4XVICxmWC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a718dbc8ebd9236743742dfd814d60e_JaffaCakes118
Files
-
6a718dbc8ebd9236743742dfd814d60e_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 963KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE