Behavioral task
behavioral1
Sample
b603da37a1a42b2353cfb69e7f5dc21d_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
b603da37a1a42b2353cfb69e7f5dc21d_JaffaCakes118
-
Size
940KB
-
MD5
b603da37a1a42b2353cfb69e7f5dc21d
-
SHA1
019e6c33e0c82c68e7bf79ed5a1705e2edd798a8
-
SHA256
be5f1861e9b2f67f9f2361ce9b74b474e9c04f506f94e19782a3d764b0227f54
-
SHA512
0f6bb42bd195353308052d16415cee91a893b7564152321ba82e125fa9b09cc9550b339a86db5929b3d25a9b567d6c360e697fcb9fff7c9189bb42f49a5185e9
-
SSDEEP
24576:03oOZH0cjkQg5p0SIgKl3VP10UZeUWDfbN:eH06hkp09Rl3PeUW7b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b603da37a1a42b2353cfb69e7f5dc21d_JaffaCakes118
Files
-
b603da37a1a42b2353cfb69e7f5dc21d_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 937KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE