Behavioral task
behavioral1
Sample
be60b7244ddfecc5dd06ec14bacf0754_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
be60b7244ddfecc5dd06ec14bacf0754_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
be60b7244ddfecc5dd06ec14bacf0754_JaffaCakes118
-
Size
39KB
-
MD5
be60b7244ddfecc5dd06ec14bacf0754
-
SHA1
cf32393181b2bd9ffe3576b63cdde2445f6db5b1
-
SHA256
3bba42944f67ef06a9d7ba96cf59966b7e9177c574571ce1ec55ed679067e928
-
SHA512
9213a1c94f335f3824043fb149b2785b2aa514b672d71a0633082dcd4a2fc2475921e10aa8695695f07a4f0b2e344d125d8e914f43a738d6019434956e964166
-
SSDEEP
768:dnbetXXhye5Dx2VH03fu3HE8P0i8CnLPeeEZ3UoqhJINHdURNUOU93wJ3:1WXZaH03fu3E8f8vZ3UoqhuNy1O3wJ3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be60b7244ddfecc5dd06ec14bacf0754_JaffaCakes118
Files
-
be60b7244ddfecc5dd06ec14bacf0754_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE