Behavioral task
behavioral1
Sample
b2de97e5a37be9701eb603d87ea4ea77_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2de97e5a37be9701eb603d87ea4ea77_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b2de97e5a37be9701eb603d87ea4ea77_JaffaCakes118
-
Size
40KB
-
MD5
b2de97e5a37be9701eb603d87ea4ea77
-
SHA1
016fd2073bd752f5bce18468c91e8ac87b2f4a14
-
SHA256
4454c239b018c327a3a7ef4f170fc57d7f4e662246e443ca1dee9c94dc8a0bc6
-
SHA512
b41f7f459ac6a8b3e71dc446bd361c3c60607ca2cd736eb90f16fac6076b17e5ed654ee3a56b7a88058bbae0ef7c78bcd24214f5ada4c7d35d3d60cb7e8921d2
-
SSDEEP
768:fPmfscBlXN0PbNxUGa/2xLTpdbSUPUuAXZ1sjeI1KrgjO2wzxiyD:fufjLN0PbP/+WfXbSU8ppAK2Exiq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2de97e5a37be9701eb603d87ea4ea77_JaffaCakes118
Files
-
b2de97e5a37be9701eb603d87ea4ea77_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.UPX1 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 74KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE