Behavioral task
behavioral1
Sample
87a996eaa705a9df88a57e72f1e006af_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
87a996eaa705a9df88a57e72f1e006af_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
87a996eaa705a9df88a57e72f1e006af_JaffaCakes118
-
Size
493KB
-
MD5
87a996eaa705a9df88a57e72f1e006af
-
SHA1
89c35a9d97a05631f851243a8ca4a1fbaf28bbfb
-
SHA256
3369ca8135a0705046542acbeac9ff6f7819c1e30e6b98b6038b9edee265d793
-
SHA512
04c4df57a92462a16ad8285fe0def0741ca7013baa4d0c3b008e5ad9eca93942686391a0a37b78d2f47a30f4fb621959fa47ad79c33db042940ac07af9dfff51
-
SSDEEP
6144:P2Z8yFCjYcb34TyQOI5JgpcvqNplcJJr05Co0tsxf4H2OtSgaT5S1FqPos/:P2y+T0Iw5pErA06xS2OQgYdb
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87a996eaa705a9df88a57e72f1e006af_JaffaCakes118
Files
-
87a996eaa705a9df88a57e72f1e006af_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 32KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 136KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE