i
Behavioral task
behavioral1
Sample
8ec82b11eee67d596cbe281b0708b7fb_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
8ec82b11eee67d596cbe281b0708b7fb_JaffaCakes118
-
Size
20KB
-
MD5
8ec82b11eee67d596cbe281b0708b7fb
-
SHA1
862de9b58bee38f9b7d0f40a0c90e62b0be8cf3d
-
SHA256
5b649d191cb23885a8eb869fedc95b3c8b4bf471a88a076faddc05cc63521bf1
-
SHA512
9f9f1bee232d0ebf478e47a2271da5e2deda6f757ea62f9b78aebe95467c1bdb2302860528a956a9dfda65d820a33e7e7518bb21a82df1c236b5a377304f6576
-
SSDEEP
384:3hc99/skCMW+E3MFyV5JWwOnOfLgMWxLND:x8skPo3MGfOnOfLboLN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ec82b11eee67d596cbe281b0708b7fb_JaffaCakes118
Files
-
8ec82b11eee67d596cbe281b0708b7fb_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE