Behavioral task
behavioral1
Sample
b53f4f9bcb739551ac648c3f1506993f_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
b53f4f9bcb739551ac648c3f1506993f_JaffaCakes118
-
Size
952KB
-
MD5
b53f4f9bcb739551ac648c3f1506993f
-
SHA1
7e40054004d7e4d2cc8235f890012b6a2abfb3e1
-
SHA256
57b0064a03153c0ac5c294e79028ec7b2a3402e106fd35a1eda394a004884256
-
SHA512
0d842869cc06e0266a48ebb317dae61e67c30815af8c5173de0d2821ee9c1e576833565061c22118b1078dfbe2e48f84cf48b086dd3ea5dadf46cb37aa66889c
-
SSDEEP
24576:r+9tok/4Mpj9KZ2dvhXHoqOCynit0YLw8rscL2fWacj0K6:r+Db/1vto+ynqzgaFwK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b53f4f9bcb739551ac648c3f1506993f_JaffaCakes118
Files
-
b53f4f9bcb739551ac648c3f1506993f_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 949KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE