Behavioral task
behavioral1
Sample
9518db5b41b09d13497d2a86d4f1a6a9_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
9518db5b41b09d13497d2a86d4f1a6a9_JaffaCakes118
-
Size
956KB
-
MD5
9518db5b41b09d13497d2a86d4f1a6a9
-
SHA1
106b33343f3a38f18d5bf552ff7cb723d3db6c35
-
SHA256
62c8a05c6f5a448ca2b4441e9912b758c2a9573dd7a213e86abba29a1afcaa26
-
SHA512
cdf27ee7da3f6bf39df6b101c59c6d2b1f86d5bd1f8e9cedd3f3e47e260f7b4d53aa759c422eaf9e1e0bfdfc50c36c3c64c0f1dc0f01677a9d4e1cd47dea2c93
-
SSDEEP
24576:H9/c5BXXU4AxqUip/42QCVn4twyr74gj0w:HoXKxqfX4xr74At
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9518db5b41b09d13497d2a86d4f1a6a9_JaffaCakes118
Files
-
9518db5b41b09d13497d2a86d4f1a6a9_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 952KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE