i
Behavioral task
behavioral1
Sample
da75d46df0c4245f6499476736c10d61_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
da75d46df0c4245f6499476736c10d61_JaffaCakes118
-
Size
22KB
-
MD5
da75d46df0c4245f6499476736c10d61
-
SHA1
fae16d2da2d31f4cb3a291c902df0101799245cc
-
SHA256
b4b6bcb63000451b4f7c55145478f4713cfe24c9ae62722aacd7d31142d2cd63
-
SHA512
5001d72c227421b9b985baf91ef97d590ba3195ae5b66eef389530831266b170810212d299dcd407b44900e790812d3f99c00d1bd7b616063f2e11c4dfafd0f0
-
SSDEEP
384:ihWGpElQkshvPB9hiLU0x7iOwUkE+NsKC9xUvUFEX:ihlprkshgo+Tqfvm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da75d46df0c4245f6499476736c10d61_JaffaCakes118
Files
-
da75d46df0c4245f6499476736c10d61_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE