Behavioral task
behavioral1
Sample
a9d8b19cceab7e69797a35e648f5454b_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a9d8b19cceab7e69797a35e648f5454b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a9d8b19cceab7e69797a35e648f5454b_JaffaCakes118
-
Size
78KB
-
MD5
a9d8b19cceab7e69797a35e648f5454b
-
SHA1
9bade84cbc6083fae0194217d199f9914dad6071
-
SHA256
c60cb0b8c1237e8b59bf589f1b0d18670b6cf38ccec61fe99c89eeffd3536617
-
SHA512
90e84cff9f747c6cc28e9326bc4a10748fe17cd12ffbc4011e041934fc677449a326123a1a1b74aac40bae42514e7c35eb20184cee66b37537c0b1e01a27a2d6
-
SSDEEP
1536:6FCq2l0Mq396bC9nR1Zix6lOSO3h6M8QFNIkwfu8qrZKM/TTju3ndGns:6Fl7vN6Gj188lOf6M8VkW/C8MrT63dh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9d8b19cceab7e69797a35e648f5454b_JaffaCakes118
Files
-
a9d8b19cceab7e69797a35e648f5454b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE