Behavioral task
behavioral1
Sample
b3c5debbc1de22ade6a6108ab1780d04_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
b3c5debbc1de22ade6a6108ab1780d04_JaffaCakes118
-
Size
172KB
-
MD5
b3c5debbc1de22ade6a6108ab1780d04
-
SHA1
bd6eb8c71efaa719cef2900a993d17f231908189
-
SHA256
7167a17ee82b97caa07597425f34e6b310b97d7ce4bf99e146637b4f34b1a5c0
-
SHA512
13ead5020e68b34f7423e4e42e123ec7d8d96e6b2dce20cab4bf6a5f7cbe947157123214f2bcd5436d8fcb845a11d8f449f8a016b51274ae611e989508050fc1
-
SSDEEP
3072:WT/C9VMLJSU5mbfLAlU/sKgpQDY0ilDVs2vbHoH9xzmbl0cD+7HdtZ6k+:cVFgLgSDVilG2vbHS+m1h+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3c5debbc1de22ade6a6108ab1780d04_JaffaCakes118
Files
-
b3c5debbc1de22ade6a6108ab1780d04_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE