Behavioral task
behavioral1
Sample
896e1e6240796822567b605b1835c74f_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
896e1e6240796822567b605b1835c74f_JaffaCakes118
-
Size
1019KB
-
MD5
896e1e6240796822567b605b1835c74f
-
SHA1
f55c42260520d1f0252fdca9962c22105c4c7af4
-
SHA256
555ea4e86d523fa55023b579e3682ab38e3e533a3f996fefa93c0281bdc78ed7
-
SHA512
c4c82ddafbf4d545d7b83ab3371f6c531b6ef9a1920f96ddf47c65f66bbb05635460715bbcbddee9ee5105b1ebad72bc94f46e8b11f0730d7867bf33e44b8ed5
-
SSDEEP
24576:4YUr0xfLaGUw5GBCpak8Cv7kkULkxtc+hAo//1tz:2rujlUc8CIkqkj/vz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 896e1e6240796822567b605b1835c74f_JaffaCakes118
Files
-
896e1e6240796822567b605b1835c74f_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1015KB - Virtual size: 1016KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE