Behavioral task
behavioral1
Sample
ef02dcd46adccbf7c9d44f7eeb2131a6_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
ef02dcd46adccbf7c9d44f7eeb2131a6_JaffaCakes118
-
Size
37KB
-
MD5
ef02dcd46adccbf7c9d44f7eeb2131a6
-
SHA1
92913a60e4a07f4e71de6b4d80435ec4b7c252db
-
SHA256
8b58daed9283c1106da8d3d380ff1269045f5a96e00f9bbc41a2d1c0cdae2716
-
SHA512
139cd60dde93c5b3a54d9d3d9d84378600cbc798c6a6a6bef7fb1322f83253e98d7af3fe8c13f72321a9d6f49cbf6bd8b8d8765a4d43b1036ba5ea9e71d881d5
-
SSDEEP
384:Da2EKUjF1eU5E6hUnzKbKDnJF8/MeBxT1kPAAXnx4XzXUh:Da2W1eU5jhVsnJkMeBxT1kpBwUh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef02dcd46adccbf7c9d44f7eeb2131a6_JaffaCakes118
Files
-
ef02dcd46adccbf7c9d44f7eeb2131a6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE