Behavioral task
behavioral1
Sample
aedd21fe57a5212f9c9cb704816d3366_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
aedd21fe57a5212f9c9cb704816d3366_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
aedd21fe57a5212f9c9cb704816d3366_JaffaCakes118
-
Size
72KB
-
MD5
aedd21fe57a5212f9c9cb704816d3366
-
SHA1
3c06463dfc8cbbb9a28b76d96191bd9f88e465e9
-
SHA256
99ab5d87372ce9557f83fc6d39ae9042bb240423ba15113b00c60c4b1c61429e
-
SHA512
387109f621541c7e1352bf7472814acab95211d6fc8c00071b159bc4bcdd8b3bda01b5882da90b312220f262be037b640a7cd5ca42f35eb2ca96fb9ec062f0cb
-
SSDEEP
1536:/17Z3DDaG7lnU8Ywct1eR3HMm4CUdmo/:/lZ3DDad94VSpd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aedd21fe57a5212f9c9cb704816d3366_JaffaCakes118
Files
-
aedd21fe57a5212f9c9cb704816d3366_JaffaCakes118.dll .js windows:5 windows x86 arch:x86 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE