Behavioral task
behavioral1
Sample
a3c3b6b314099731fa689e1505186646_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
a3c3b6b314099731fa689e1505186646_JaffaCakes118
-
Size
90KB
-
MD5
a3c3b6b314099731fa689e1505186646
-
SHA1
832791fb348ae1716f337dcf0d423e886e713cd2
-
SHA256
7e28f9923887a8579dccab0315a90dd002e22d6cd3f20ea693f06b957a92efdf
-
SHA512
22b91ae1651e35b51e1c68edd174133a73f500d0e291f09221ed2c4893d4568fde1d6a5bb2018ca7c2d52dae71c2c2d3153fd0d3adaa22949737564b392d8332
-
SSDEEP
1536:CXHGbsxbRk1XVF6bhiWta1lFm5RfmA/MinvhJFUhCndfpKZnbWh+:wHG2yPUVias/ERfmYJDFMehqah
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3c3b6b314099731fa689e1505186646_JaffaCakes118
Files
-
a3c3b6b314099731fa689e1505186646_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE