WSPStartup
Behavioral task
behavioral1
Sample
db3ed055495c828f91e8755e1174d05c_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
db3ed055495c828f91e8755e1174d05c_JaffaCakes118
-
Size
314KB
-
MD5
db3ed055495c828f91e8755e1174d05c
-
SHA1
5d7ec828de378fe2abc23b8ebdccc1359dd8d3da
-
SHA256
af0677e717e8f2b9b0774398e8c0bb051b1a16d5a04527601fee164f5e99a118
-
SHA512
23ebaf582551eba1d8e1e9150f89a2ee19a2f1230a2bf9ebdcb46e0a65693330efae3b8282032c11e7df62609a922a5f041695414771a64a2243e790a7bbcbbf
-
SSDEEP
6144:4nGr+t/f0fIP7fQgaxKKcbMdpVUMnFS9jt:4m+dHQga3cbMdpyMA3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db3ed055495c828f91e8755e1174d05c_JaffaCakes118
Files
-
db3ed055495c828f91e8755e1174d05c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE