Behavioral task
behavioral1
Sample
a5d78657fb8ba756d9623c373900eba3_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a5d78657fb8ba756d9623c373900eba3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a5d78657fb8ba756d9623c373900eba3_JaffaCakes118
-
Size
258KB
-
MD5
a5d78657fb8ba756d9623c373900eba3
-
SHA1
91d57724d84b1870cccf8e72c35afffebd559204
-
SHA256
e589fc103195504132c91486c321b8a547de7559a0dd94d317f0d94269a4a4a4
-
SHA512
41dc5f5b894b4c50545693b208c14b4e6b45c1fd51d16cd6dc38fbc0fe5416fcd893d3c259f71f45a339605ec514ef05c4c3725bbae27e35ddcffef7d30a7e77
-
SSDEEP
6144:d9f7GbyXySzfLbuPU3KsITfOb4TyQOI5JgpcvqNplcu51ykZF9lJ:d9Kb+HKM3BqXT0Iw5prbykZL
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5d78657fb8ba756d9623c373900eba3_JaffaCakes118
Files
-
a5d78657fb8ba756d9623c373900eba3_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 79KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 137KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE