Behavioral task
behavioral1
Sample
8a2a62f7d36fe4f185c56e93e132de8f_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
8a2a62f7d36fe4f185c56e93e132de8f_JaffaCakes118
-
Size
16KB
-
MD5
8a2a62f7d36fe4f185c56e93e132de8f
-
SHA1
fea3c78532e90b055d12c3abdbcc1b109e983610
-
SHA256
0f8d10af7295c962450be2d28db61ac9cd08e662e821c8310e21ad2f7ab141c3
-
SHA512
89adb02d6c68d6a77a5560ca4d7f55bd97a873f78833fa6a897a0b49abc59922a345b0d613048cdfa4ff242b365386d5c07b073f2439bd2076c62560b20cf2eb
-
SSDEEP
384:7e0BG0eiyAikmg9bdWdBcKjizEQYyZRGvfnNTp/j7Mp3BBa1YP:60Bfei3ygLKqfRGXF9vMp3BoK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a2a62f7d36fe4f185c56e93e132de8f_JaffaCakes118
Files
-
8a2a62f7d36fe4f185c56e93e132de8f_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPXA Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPXB Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE