Behavioral task
behavioral1
Sample
85ef3ced7192a3d590680786b99d12d4_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
85ef3ced7192a3d590680786b99d12d4_JaffaCakes118
-
Size
897KB
-
MD5
85ef3ced7192a3d590680786b99d12d4
-
SHA1
7be2efd05872fa05771d6c09f55f23ab07384c47
-
SHA256
ac59b027ff36dcdda530459203848ae25d2889cc471c8b02e20340764d7858d9
-
SHA512
891ee31dcb2bc46aa93f1a59cf7bf8c9f19bcdba10994d05146e7de9ac8dfa08ba18359717e59a86b1d9941194eefb60cb2bfd45cbf6985ecabe90488072b726
-
SSDEEP
24576:MEoRAqNtv2OHGtHYJBnxrhRlS5a1LvAo4ceX/lSxFP02TK:4Ztv9GWJhxpIo/jTK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85ef3ced7192a3d590680786b99d12d4_JaffaCakes118
Files
-
85ef3ced7192a3d590680786b99d12d4_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 893KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE