da1df1fa552f
Behavioral task
behavioral1
Sample
b8b238f43d876abc13545a226ef56396_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
b8b238f43d876abc13545a226ef56396_JaffaCakes118
-
Size
47KB
-
MD5
b8b238f43d876abc13545a226ef56396
-
SHA1
390f1a2663141b15ca4683d024433ca6158b1136
-
SHA256
cee288c68923151c41cdad8524c71a352ee1e64a6c4c4c285f9d67d63e518a8b
-
SHA512
a06d472556112a58e22343c9b2a110332dec408f4d7124b252ef15a6c7995c18c8aa1eb6acbca4588c54e5c221e4f4e9e24f4d2336d7eb5ecc3f01c32d926640
-
SSDEEP
768:BSISG+f4ToCfkNxZXqDUnBScGKmFJ5lGduYK0G3alDVpfyipBtYCRo:BSISGXTo5xR6PcGKmFJ5lGdud30JyGBW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8b238f43d876abc13545a226ef56396_JaffaCakes118
Files
-
b8b238f43d876abc13545a226ef56396_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE