Behavioral task
behavioral1
Sample
83244b2a5d09c65ba4f8d565a53f14f9_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
83244b2a5d09c65ba4f8d565a53f14f9_JaffaCakes118
-
Size
970KB
-
MD5
83244b2a5d09c65ba4f8d565a53f14f9
-
SHA1
38cce11af60698ccaa4fb51139ea06f94f8ac777
-
SHA256
905c90c1f7815639fd70af5940a6a49d6aeca5a6872c29051b0697a40f678c64
-
SHA512
e63657d9c76f280288376b78d2cbb0c023342f2731de01bf72f1da77698037fc266f26979201a82bb99aceb2bec97f6a2f4953200495f58fb83af6f43a160ba7
-
SSDEEP
24576:3zeU9Yjrnlz+6eDte6Hxgp8/fLUKTp48A8Y+v1jCQv3:3KUGo6eJe6RgiDUY48HN2O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83244b2a5d09c65ba4f8d565a53f14f9_JaffaCakes118
Files
-
83244b2a5d09c65ba4f8d565a53f14f9_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 967KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE