CPlApplet
Behavioral task
behavioral1
Sample
78876cc57fc93b2275cb560a642858df_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
78876cc57fc93b2275cb560a642858df_JaffaCakes118
-
Size
171KB
-
MD5
78876cc57fc93b2275cb560a642858df
-
SHA1
4aab83c77bcfc807dc4a500af25f3408dd49186f
-
SHA256
8b528aed85863c2bce782c35b05258c20248d90eefdbdb0750eb512154e84bec
-
SHA512
c320200849c97efefbf04411dd71d7ecb457e028d3243cca128e72cdf30ead540f9ae849813a3f7b236d2921119066030fe7abaeda837e16b41be411ce5735dd
-
SSDEEP
1536:ieSo9F5ib3q/Og2l5ug3V/fvc6ivgXuQyzoX/s/WariQFpfVy/IeIEmotMth:ieSo92baSTH/ncU+DzLWariEGIE4t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78876cc57fc93b2275cb560a642858df_JaffaCakes118
Files
-
78876cc57fc93b2275cb560a642858df_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE