Behavioral task
behavioral1
Sample
ab18b0e14d79950b7e2eb6c855fc03b8_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
ab18b0e14d79950b7e2eb6c855fc03b8_JaffaCakes118
-
Size
945KB
-
MD5
ab18b0e14d79950b7e2eb6c855fc03b8
-
SHA1
8ec7d216b3d68c8abb241805670cd3dd9dd7d0e0
-
SHA256
8c5b3ec92204e0e315c0bd5c5aa48f88c61d3459923855be35fe5df548dde414
-
SHA512
b955f3485e6d57c4d57fa190ab93b7fa0381587b8cbb3086d27c1276ac20a0f2a40e3c8518a7767dc7190feb866d729468d177af585c4656d785c914a71e2315
-
SSDEEP
24576:AVPxjT6V70Y7i3ECC0Z2R6ZrA0uCldAzSKIyJBXgQ:kmV7xi3iew69LBKtJB5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab18b0e14d79950b7e2eb6c855fc03b8_JaffaCakes118
Files
-
ab18b0e14d79950b7e2eb6c855fc03b8_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 942KB - Virtual size: 944KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE