cnunlidux
Behavioral task
behavioral1
Sample
eac2bd9366470ccff34f0b0a960c6dcc_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eac2bd9366470ccff34f0b0a960c6dcc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
eac2bd9366470ccff34f0b0a960c6dcc_JaffaCakes118
-
Size
141KB
-
MD5
eac2bd9366470ccff34f0b0a960c6dcc
-
SHA1
1be8e15e77f0376d550a0c0926552a66105c999b
-
SHA256
ad635b65d60535a6f4deedb856603af0b92fb71bfe695dc2f84948fbbafdffc6
-
SHA512
45c8ea47f93fb1b17ba3eb49ab54521af1b5c8881d0d02bb75e5174ce70f904c17d7670fb48673ce2deb72957c61174e8369b89d29fa511809552fbffadbf1f9
-
SSDEEP
3072:pU714G5SqiIpR9HUVLYWRf/OYKehOPtoa:pC1JkRyWLYWdaehOF1
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eac2bd9366470ccff34f0b0a960c6dcc_JaffaCakes118
Files
-
eac2bd9366470ccff34f0b0a960c6dcc_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 126KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE