Behavioral task
behavioral1
Sample
ddf81e220072f5b3cfdbe2c004e06a36_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ddf81e220072f5b3cfdbe2c004e06a36_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ddf81e220072f5b3cfdbe2c004e06a36_JaffaCakes118
-
Size
50KB
-
MD5
ddf81e220072f5b3cfdbe2c004e06a36
-
SHA1
4b27757bdd797d419668f820f731a2a7c6c86bab
-
SHA256
7ff5e3b670797d659ca9d877c5d7b583915c1e4872d4408b2e195a9a9b2e7baf
-
SHA512
a6e56839f8b706b949ddbf5c1e0031b0d4e7594ad7e4e9f459aca1f797147423a865cba63650b0e802342937e373366d6ec092078af292540a1a2ee3fa99dbb3
-
SSDEEP
768:NsJczjrkHc8++jUkn3bpY8dnQh8dLXiqeYitEBtNk2nlVaYxgqRzTamj8XcvP3KL:EczOj/nLTQh6Lihx25xg4KmjEg/B
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddf81e220072f5b3cfdbe2c004e06a36_JaffaCakes118
Files
-
ddf81e220072f5b3cfdbe2c004e06a36_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE