Behavioral task
behavioral1
Sample
b65208deb488a8c882cd71ba2eeb1960_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
b65208deb488a8c882cd71ba2eeb1960_JaffaCakes118
-
Size
959KB
-
MD5
b65208deb488a8c882cd71ba2eeb1960
-
SHA1
923643cece683ed1df25c4b82625b4b100253b99
-
SHA256
e26e27b1218184097dbd6335d7c8802e4bdbc177c47b6eabe88faa78198782ba
-
SHA512
ecb9f003e6603914f57b7fb36b7ec6855742a880f4ee80100e516f3ea806d30b12560627aa4b403c6e39540900ffbad23230b5ac6e636e44a1c23eca8bfcec48
-
SSDEEP
24576:11hWJ3UkBMYWOqawdsM62ogtLMbKGH7FKvY6:1LkTqawErgmb0vY6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b65208deb488a8c882cd71ba2eeb1960_JaffaCakes118
Files
-
b65208deb488a8c882cd71ba2eeb1960_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 955KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE