Behavioral task
behavioral1
Sample
a31d5244b91e336a31f7c69661a2b7e2_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
a31d5244b91e336a31f7c69661a2b7e2_JaffaCakes118
-
Size
16KB
-
MD5
a31d5244b91e336a31f7c69661a2b7e2
-
SHA1
0dcd942f3e30339a8fc025137c4d6f67be415a03
-
SHA256
94ae6c3ac14274790ed26f298b96f32bf66d9afd6f19f8cf68981e17558f6c32
-
SHA512
82ca1f204c8b7e1d0da810878cb12cad8116a70beb3c52c8bebf8041347665130d9ac786c46c7bcb3ff1bbfd4f48ab10c774c2063ef5b806378733a3cfeba8ae
-
SSDEEP
384:5RbDZTZkvIm0tBKSNskncK2WiJ65FvgtINmwxkmq4leo:nZlwnBouKPvFvcINmwR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a31d5244b91e336a31f7c69661a2b7e2_JaffaCakes118
Files
-
a31d5244b91e336a31f7c69661a2b7e2_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPXA Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPXB Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE