Behavioral task
behavioral1
Sample
aea380611d1835ec26867379cd2e7257_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
aea380611d1835ec26867379cd2e7257_JaffaCakes118
-
Size
959KB
-
MD5
aea380611d1835ec26867379cd2e7257
-
SHA1
23cc579e48c1cd1da8238ea5ca425e63a6b59e6b
-
SHA256
c8d17c29b32d43daaf60a248252b92d969cd358a71ec55c0fa2d2e4e65362b4e
-
SHA512
24e7dad26bce76b006a9431e5941c716a0a4cd2362472791db314a18217ffa01cdbd147455a5a3f90b85ecc59495635a4ef87a098a9954b440aab46796f8107d
-
SSDEEP
24576:t1eBH1p0hczu/DG4ympZp+PYMV746QMJ:0Ehci/wSDM+6QM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aea380611d1835ec26867379cd2e7257_JaffaCakes118
Files
-
aea380611d1835ec26867379cd2e7257_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 955KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE