Behavioral task
behavioral1
Sample
c1d3886c5413e93f22aa9c3c8f557c5e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c1d3886c5413e93f22aa9c3c8f557c5e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c1d3886c5413e93f22aa9c3c8f557c5e_JaffaCakes118
-
Size
19KB
-
MD5
c1d3886c5413e93f22aa9c3c8f557c5e
-
SHA1
2814f5b106be52d3b9cadd9b11594a7dda608e67
-
SHA256
443d0efb5467e6a1e512da6480400544d7320ed1fa4406bce3ce306f853fc835
-
SHA512
af74db885a5d70e2f422d9f75a29f75bc0a0f0243f232d4a214bf1776f206ae978ebce44e6bab05bdfe0875bea326d3ab713197cb7cf6e01e1906da5e8d06de0
-
SSDEEP
384:VgYBP/m8zt3cHpykDS9fyLRnl8mjE7iaWxGMAxdr6+I9PfPPD:VG8zBcJ89qLRWmjA5WxG/xQLfb
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1d3886c5413e93f22aa9c3c8f557c5e_JaffaCakes118
Files
-
c1d3886c5413e93f22aa9c3c8f557c5e_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.p5s2 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE