Behavioral task
behavioral1
Sample
d0333acf394ccef191e9d667dcfe88ba_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0333acf394ccef191e9d667dcfe88ba_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d0333acf394ccef191e9d667dcfe88ba_JaffaCakes118
-
Size
55KB
-
MD5
d0333acf394ccef191e9d667dcfe88ba
-
SHA1
b8a24c5102068a66c871421b4a8fb96a1dc8bbd7
-
SHA256
43a6f01caf04c2bdda921ea51d350b7063e6b0b0664edc878ccb4ed48f7cc2fb
-
SHA512
e742992431e85906a20be849b97efa8d5a4a6a364e486ebcf83d17a26a9ffe946c184c15fca5dd7749621dc5c863941aa49fdadfa8d8aa00f7dbf746b3d3e1cf
-
SSDEEP
1536:UYHBag1oWXTXGb2gH/NcX2ZoCxSiTWjoowmD4AFup4QFtN5le47rZ:UYHAoGbDHaX2eCx7NW4GuFFVle4fZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0333acf394ccef191e9d667dcfe88ba_JaffaCakes118
Files
-
d0333acf394ccef191e9d667dcfe88ba_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE