Behavioral task
behavioral1
Sample
b95ec40edf83b172bd70d0cbf4748f3c_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
b95ec40edf83b172bd70d0cbf4748f3c_JaffaCakes118
-
Size
14KB
-
MD5
b95ec40edf83b172bd70d0cbf4748f3c
-
SHA1
614e593735249b87e8b90e896c4806e1ced07dfc
-
SHA256
358bddfddfd56abccd240029ad295e028ac8d1b94f999f3290e33ae9609781c3
-
SHA512
81d2409281e4dff44de7ce974635f254f3fc60a4acd949969596858ec72eb4f25a7d5c1545552c8253f1cb21a75741b1c0528f8576872923fa5f5a6f0657b2f5
-
SSDEEP
192:Ut1VPKqhlHaXTK8Q7m7wkkALifv1XjvrbO5F7bHA6cmXWANz4QWIywAjCtbor2:gyDK8J7w5VvrbO5lAMXWANcQWIy6tB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b95ec40edf83b172bd70d0cbf4748f3c_JaffaCakes118
Files
-
b95ec40edf83b172bd70d0cbf4748f3c_JaffaCakes118.dll windows:4 windows x86 arch:x86
60180305da1b391f4fc2af5784ddd919
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
TransactNamedPipe
GetMailslotInfo
GetConsoleMode
SetFileApisToOEM
VDMConsoleOperation
lstrcatA
gdi32
UpdateICMRegKeyA
SetViewportExtEx
OffsetWindowOrgEx
CreateColorSpaceA
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE