CreateGameProcess
Behavioral task
behavioral1
Sample
b9f23f0d2b49c14f767125cbaf60bc7c_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
b9f23f0d2b49c14f767125cbaf60bc7c_JaffaCakes118
-
Size
1.0MB
-
MD5
b9f23f0d2b49c14f767125cbaf60bc7c
-
SHA1
ca40591cd0bf4b6b1a5f01dc9b05cd15621b3643
-
SHA256
c569feca597ac68b861f9ee895b274caab0ddff69a9567258af551fbfc4367f0
-
SHA512
a2f1c34b98040b08170f9e8741a071312df09c71d1cd6978dd62c548a1e7af08d5a17e3684784c83a8bd3d42b1bfd33c2a8a279c4b7849abc63a8c2857c72351
-
SSDEEP
24576:e6qOXstzx0ispm3FZRR22CHiyTM0C5sfTnDpCQQaR5C:e6qOSXam37WlBT9XbAQlC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9f23f0d2b49c14f767125cbaf60bc7c_JaffaCakes118
Files
-
b9f23f0d2b49c14f767125cbaf60bc7c_JaffaCakes118.dll windows:5 windows x86 arch:x86
d1369e92774479052f5b1ca2c7ddafc1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FileTimeToSystemTime
Exports
Exports
Sections
Size: 145KB - Virtual size: 25.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 307KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 900KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ynxhdlhy Size: 708KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kompufzq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE