Behavioral task
behavioral1
Sample
837ff2dd63ca4892d875b1b011e6e48c_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
837ff2dd63ca4892d875b1b011e6e48c_JaffaCakes118
-
Size
137KB
-
MD5
837ff2dd63ca4892d875b1b011e6e48c
-
SHA1
01fbf80107fe1d80cf1bfb1bed4f68527208201b
-
SHA256
8d12c86714a953df5269a08b222263831a9a6185edfb2613ca796196ed3d0aa3
-
SHA512
3d9e95fb701ba6e5c70d055adbf0ecbfa2b80bf8cf7a8c196932cc07897722c6d57f5721ac22f2a3a57e3f5af419f99c748d0efe3331f3fe41cb05f413fae195
-
SSDEEP
3072:45U8UVpCeG+iRO2apR1Ymv5D0gICjrSHjwv9Q0poOYq4ts:58UVpxpP1v5D0KjrmaaOn4ts
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 837ff2dd63ca4892d875b1b011e6e48c_JaffaCakes118
Files
-
837ff2dd63ca4892d875b1b011e6e48c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE