da1df0fa552f
Behavioral task
behavioral1
Sample
c2642c68dbd42631ef97ce44fbd7e935_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
c2642c68dbd42631ef97ce44fbd7e935_JaffaCakes118
-
Size
253KB
-
MD5
c2642c68dbd42631ef97ce44fbd7e935
-
SHA1
7b3fc45e3cdf4d9e045a4a3b7aec977fd61c376e
-
SHA256
cc9c10d3c73a9bcb2e98949efd0b45eca985627315d33f53075189f32437b39e
-
SHA512
ede8ac0e6ae94d3176fbd18a8c27c8f2647b33afc9206831088b3b2e004efa992ff0fa8d7350ab112c791338632a5ea21c310889c81b746b1c485f6c55b16dab
-
SSDEEP
1536:BouWFKZM/F6FIlBhcCs8W7nLzQkd/6sKWWsjM:BiFKZM/OP3d/6stM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2642c68dbd42631ef97ce44fbd7e935_JaffaCakes118
Files
-
c2642c68dbd42631ef97ce44fbd7e935_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE