Behavioral task
behavioral1
Sample
709be9667351f73d804acaf30b5a376e_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
709be9667351f73d804acaf30b5a376e_JaffaCakes118
-
Size
699KB
-
MD5
709be9667351f73d804acaf30b5a376e
-
SHA1
e4ae856e5845d8ef9ae6531b6c2240a288d73f23
-
SHA256
29dd67c65921585eaf0a0629713ba13b1ccbe6a881cfb8f79e8ea11c9b893081
-
SHA512
e3d2899cc063b7de37eaabe91c18767610df25a3166c74c6dd39c56914efb32cd9934de3e72ff1d96e3d14f06246531cc5cdc0aa9752e0aff18257e1960f51e9
-
SSDEEP
12288:lmqJQ61V+VHjmICcVXhNE8+tYtQ/ZWylRsv3bkh4khdTZGBYGB:llQ616mAE8+aa/ZWy9n3TZ+RB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 709be9667351f73d804acaf30b5a376e_JaffaCakes118
Files
-
709be9667351f73d804acaf30b5a376e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 365KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE