ytyx
Behavioral task
behavioral1
Sample
b952c150551ffa12373cc3b93c2c3b27_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
b952c150551ffa12373cc3b93c2c3b27_JaffaCakes118
-
Size
38KB
-
MD5
b952c150551ffa12373cc3b93c2c3b27
-
SHA1
c4b170dd0051220174fc28c98ae584fd7b982ab4
-
SHA256
7e684357fe5d33d0bb28433b3d8a10504aeb17454f82270704a33ab15d041aa4
-
SHA512
09c5110f65ba8524b2e17698aa291a40775ece0165f1e9821556eaf035a7d03303d7c0c075f37cecc356559d4fbb936fdc4834bbe4cbd9f082e7bbae7c67b6cf
-
SSDEEP
768:Lsy7IFdxn5OYXaxs8Dq8d6X8xUezNRm3docZ5Q:8Fn51axsuq8d6XdezNRm3H5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b952c150551ffa12373cc3b93c2c3b27_JaffaCakes118
Files
-
b952c150551ffa12373cc3b93c2c3b27_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE