Behavioral task
behavioral1
Sample
ced811dcf0d20f3836c9bda457acb8c0_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
ced811dcf0d20f3836c9bda457acb8c0_JaffaCakes118
-
Size
114KB
-
MD5
ced811dcf0d20f3836c9bda457acb8c0
-
SHA1
68db0b4e445b6a84acca0dfe0f9a38ffb2412592
-
SHA256
bd5b23e28ceb58fb2166acd5240e317272ad7594f5c5c76d763bc766530e8c9c
-
SHA512
d68f92261ecbbaabc1ff0dbd6b0aa928e775291c25fafb723f0bcf007d2ea7100e23b73999a0ab37b54e220bc27afc64275bdf37a4c170772eec783c1ce5e0c5
-
SSDEEP
1536:5QwOt1r1H5svKSFw+k9w/qKPDE9EHBJy0W2MsA9GglAKL9sxNuWHgOhz5iJ8UfNw:aNt1B59U+2MskOhlG8USai1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ced811dcf0d20f3836c9bda457acb8c0_JaffaCakes118
Files
-
ced811dcf0d20f3836c9bda457acb8c0_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE