Behavioral task
behavioral1
Sample
ab4a72ba15bc8c537c2dc41962e08ae0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ab4a72ba15bc8c537c2dc41962e08ae0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ab4a72ba15bc8c537c2dc41962e08ae0_JaffaCakes118
-
Size
601KB
-
MD5
ab4a72ba15bc8c537c2dc41962e08ae0
-
SHA1
60ac967c2b0a906697719443fb10a21603dd40e3
-
SHA256
8d814ddf6298703374d4dd6a762342c97cc951636dc6cc80f52de77d564cd413
-
SHA512
3615706e605b86cab29559eb0b71b04212da3e77c7559b9f5b92fc5912978799744aa01fe046a6a2057f1365e5014a67e0e6a67787377118f4aa074b02191dc4
-
SSDEEP
12288:XTN7JxSTX5BZPT2bGcsQI7CZqOGq9A+8te0r2ijseCnJbUbH/ODF:J7JETXDkblsd7uJ8t/r2iCJbrF
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab4a72ba15bc8c537c2dc41962e08ae0_JaffaCakes118
Files
-
ab4a72ba15bc8c537c2dc41962e08ae0_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.K0 Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.K1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE