UTYRYTR
Static task
static1
Behavioral task
behavioral1
Sample
89eddac18d5201f486016d4b142e789e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
89eddac18d5201f486016d4b142e789e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
89eddac18d5201f486016d4b142e789e_JaffaCakes118
-
Size
11KB
-
MD5
89eddac18d5201f486016d4b142e789e
-
SHA1
a8cbd74210703ffce08e5de44ce6b389857e8ace
-
SHA256
f14f74b2a4ab21f4f7120626990b18bcf2f277d4fa94528373380110782483b9
-
SHA512
9043d1520cd19ca7f709b713a7fb57b5403c53bed0c054a5857456bff232102a373e95683ddcd74280c572f515d455fb18418dafa075fba1959687e5d06b1f4d
-
SSDEEP
192:HgnM5POeZOe6sK+Sg5pxcdSKzmMI/NpEHbG4A3/FNajQ/vvwN5Kejg0Hthdo8Gn3:HgM5WoOe6szSglcZD4pEHaD3W4CA6pN2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89eddac18d5201f486016d4b142e789e_JaffaCakes118
Files
-
89eddac18d5201f486016d4b142e789e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE