Behavioral task
behavioral1
Sample
6af360211d5a17a90337c0207215bc3b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6af360211d5a17a90337c0207215bc3b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6af360211d5a17a90337c0207215bc3b_JaffaCakes118
-
Size
18KB
-
MD5
6af360211d5a17a90337c0207215bc3b
-
SHA1
1ae5e703ae866dfa0a68b532786ee56bca1ef42e
-
SHA256
a8db9221139c94e1fe3f95d4f1aebb0193f179a562802b5b3d40e47b3dff3602
-
SHA512
9be8c2090b8d4da3e85084ffd16395fad060a4d434910047aff9650b14cd8d1b43e280cdcbfef3ed55aef781c81b7a7219f8fcf15ddc2e0c17ac01b3b6c0a003
-
SSDEEP
384:OG18JMx+Purn7mQNnJtVEt5wec9UUppZSCF3Zp7xDkFVlDv:h1OPuL1nJt1ZPKVB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6af360211d5a17a90337c0207215bc3b_JaffaCakes118
Files
-
6af360211d5a17a90337c0207215bc3b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE