Behavioral task
behavioral1
Sample
bde2a7992a40b4139327dd4170502fb2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bde2a7992a40b4139327dd4170502fb2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bde2a7992a40b4139327dd4170502fb2_JaffaCakes118
-
Size
11KB
-
MD5
bde2a7992a40b4139327dd4170502fb2
-
SHA1
be695c84174f09897938f124cac9484b89da83ae
-
SHA256
4400be20431097728473ad52b5ddf290a04eff625fdc10fefa4eea47b05ded7b
-
SHA512
905cb25ee1b529d8951b9eb98c0a5be51d78555e9933a1cfea349c521dbb41e03e20fe9fcd5a6670aac375c2877c745302b85628b50691abc73f991818b4f6b8
-
SSDEEP
192:nDG8G3Ou3tmmbdUs1l9lf2NrqXpaIfjOh0prFgtYg4qM8wg56Df7rHXSRXMzkvSc:DGZ3HmmJjlDf2kaIfjOqZcYgdM8358fS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bde2a7992a40b4139327dd4170502fb2_JaffaCakes118
Files
-
bde2a7992a40b4139327dd4170502fb2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE